Loading...
Loading...
oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
February 13, 2015
May 6, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2014-0154
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.