Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat virtualization 4.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-0207
A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.
Ovirt VdsmRedhat Virtualization 4.0Redhat Virtualization For Ibm Power Little Endian 4.0Redhat Virtualization Host 4.0
2.1
CVSSv2
CVE-2021-3620
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.
Redhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Openstack 16.1Redhat Enterprise Linux For Power Little Endian 8.0Redhat Virtualization For Ibm Power Little Endian 4.0Redhat Openstack 1Redhat Ansible Automation Platform Early Access 2.0Redhat Ansible EngineRedhat Virtualization Manager 4.4
NA
CVE-2022-2805
A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.
Redhat Virtualization 4.0
NA
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local malicious user to create specially crafted packets with a modified or spoofed target IP address field that can redire...
Openvswitch OpenvswitchRedhat Enterprise Linux 7.0Redhat Virtualization 4.0Redhat Openshift Container Platform 4.0Redhat Fast Datapath -
4
CVSSv2
CVE-2020-35497
A flaw was found in ovirt-engine 4.4.3 and previous versions allowing an authenticated user to read other users' personal information, including name, email and public SSH key.
Ovirt Ovirt-engineRedhat Virtualization 4.0
2.6
CVSSv2
CVE-2020-10775
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and previous versions, where it allows remote malicious users to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical p...
Oracle Virtualization 4.0Redhat Ovirt-engine
7.5
CVSSv2
CVE-2017-9214
In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
Openvswitch Openvswitch 2.7.0Debian Debian Linux 9.0Redhat Openstack 6.0Redhat Openstack 7.0Redhat Openstack 8Redhat Openstack 9Redhat Openstack 10Redhat Openstack 11Redhat Virtualization 4.1Redhat Virtualization Manager 4.1Redhat Virtualization 4.0
5
CVSSv2
CVE-2017-7539
An assertion-failure flaw was found in Qemu prior to 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation....
Qemu QemuRedhat Openstack 7.0Redhat Openstack 6.0Redhat Virtualization 4.0Redhat Openstack 10Redhat Openstack 9Redhat Openstack 8Redhat Openstack 11Redhat Virtualization 3.0
5
CVSSv2
CVE-2019-3888
A vulnerability was found in Undertow web server prior to 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFai...
Redhat UndertowRedhat Virtualization 4.0Redhat Virtualization Host 4.0Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Netapp Active Iq Unified Manager -
5
CVSSv2
CVE-2019-3804
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web servic...
Cockpit-project CockpitFedoraproject Fedora -Redhat Virtualization 4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook