Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-0153

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.5%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2014-0153
  • Ovirt » Ovirt » Version: N/A
    cpe:2.3:a:ovirt:ovirt:-
  • Ovirt » Ovirt » Version: 3.0.0
    cpe:2.3:a:ovirt:ovirt:3.0.0
  • Ovirt » Ovirt » Version: 3.0.0_0001
    cpe:2.3:a:ovirt:ovirt:3.0.0_0001
  • Ovirt » Ovirt » Version: 3.1.0
    cpe:2.3:a:ovirt:ovirt:3.1.0
  • Ovirt » Ovirt » Version: 3.2.0
    cpe:2.3:a:ovirt:ovirt:3.2.0
  • Ovirt » Ovirt » Version: 3.2.0-4
    cpe:2.3:a:ovirt:ovirt:3.2.0-4
  • Ovirt » Ovirt » Version: 3.2.1
    cpe:2.3:a:ovirt:ovirt:3.2.1
  • Ovirt » Ovirt » Version: 3.2.1-1
    cpe:2.3:a:ovirt:ovirt:3.2.1-1
  • Ovirt » Ovirt » Version: 3.2.2
    cpe:2.3:a:ovirt:ovirt:3.2.2
  • Ovirt » Ovirt » Version: 3.3
    cpe:2.3:a:ovirt:ovirt:3.3
  • Ovirt » Ovirt » Version: 3.3.0
    cpe:2.3:a:ovirt:ovirt:3.3.0
  • Ovirt » Ovirt » Version: 3.3.0.1
    cpe:2.3:a:ovirt:ovirt:3.3.0.1
  • Ovirt » Ovirt » Version: 3.3.1
    cpe:2.3:a:ovirt:ovirt:3.3.1
  • Ovirt » Ovirt » Version: 3.3.2
    cpe:2.3:a:ovirt:ovirt:3.3.2
  • Ovirt » Ovirt » Version: 3.3.3
    cpe:2.3:a:ovirt:ovirt:3.3.3
  • Ovirt » Ovirt » Version: 3.3.4
    cpe:2.3:a:ovirt:ovirt:3.3.4
  • Ovirt » Ovirt » Version: 3.3.5
    cpe:2.3:a:ovirt:ovirt:3.3.5
  • Ovirt » Ovirt » Version: 3.4.0
    cpe:2.3:a:ovirt:ovirt:3.4.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved