RHSA-2015:0158HighCVSS 4.8

Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0

Published
February 11, 2015
Last Modified
June 27, 2026

🔗 CVE IDs covered (4)

CVE-2014-3577 →CVE-2012-6153 →CVE-2014-0151 →CVE-2014-0154 →

📋 Description

CVE-2012-6153 — CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix CVE-2014-0151 — ovirt-engine: cross-site request forgery (CSRF) CVE-2014-0154 — ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set CVE-2014-3577 — CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

🔗 References (186)