CVE-2020-35497
Fixed in a distro release EPSS <1%
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.
Products: ovirt-engine, redhat virtualization
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhev manager 4.4 el8 | ovirt-engine | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-backend | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-dbscripts | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-health-check-bundler | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-restapi | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-base | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-cinderlib | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-imageio | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-ovirt-engine | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-ovirt-engine-common | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-vmconsole-proxy-helper | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-websocket-proxy | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-tools | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-tools-backup | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-vmconsole-proxy-helper | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-webadmin-portal | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-websocket-proxy | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | python3-ovirt-engine-lib | 0:4.4.4.7-0.2.el8ev |
| Red Hat rhev manager 4.4 el8 | rhvm | 0:4.4.4.7-0.2.el8ev |