Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-0154

oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.6%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2014-0154
  • Ovirt » Ovirt » Version: N/A
    cpe:2.3:a:ovirt:ovirt:-
  • Ovirt » Ovirt » Version: 3.0.0
    cpe:2.3:a:ovirt:ovirt:3.0.0
  • Ovirt » Ovirt » Version: 3.0.0_0001
    cpe:2.3:a:ovirt:ovirt:3.0.0_0001
  • Ovirt » Ovirt » Version: 3.1.0
    cpe:2.3:a:ovirt:ovirt:3.1.0
  • Ovirt » Ovirt » Version: 3.2.0
    cpe:2.3:a:ovirt:ovirt:3.2.0
  • Ovirt » Ovirt » Version: 3.2.0-4
    cpe:2.3:a:ovirt:ovirt:3.2.0-4
  • Ovirt » Ovirt » Version: 3.2.1
    cpe:2.3:a:ovirt:ovirt:3.2.1
  • Ovirt » Ovirt » Version: 3.2.1-1
    cpe:2.3:a:ovirt:ovirt:3.2.1-1
  • Ovirt » Ovirt » Version: 3.2.2
    cpe:2.3:a:ovirt:ovirt:3.2.2
  • Ovirt » Ovirt » Version: 3.3
    cpe:2.3:a:ovirt:ovirt:3.3
  • Ovirt » Ovirt » Version: 3.3.0
    cpe:2.3:a:ovirt:ovirt:3.3.0
  • Ovirt » Ovirt » Version: 3.3.0.1
    cpe:2.3:a:ovirt:ovirt:3.3.0.1
  • Ovirt » Ovirt » Version: 3.3.1
    cpe:2.3:a:ovirt:ovirt:3.3.1
  • Ovirt » Ovirt » Version: 3.3.2
    cpe:2.3:a:ovirt:ovirt:3.3.2
  • Ovirt » Ovirt » Version: 3.3.3
    cpe:2.3:a:ovirt:ovirt:3.3.3
  • Ovirt » Ovirt » Version: 3.3.4
    cpe:2.3:a:ovirt:ovirt:3.3.4
  • Ovirt » Ovirt » Version: 3.3.5
    cpe:2.3:a:ovirt:ovirt:3.3.5
  • Ovirt » Ovirt » Version: 3.4.0
    cpe:2.3:a:ovirt:ovirt:3.4.0
  • Ovirt » Ovirt » Version: 3.4.1
    cpe:2.3:a:ovirt:ovirt:3.4.1
  • Ovirt » Ovirt » Version: 3.4.2
    cpe:2.3:a:ovirt:ovirt:3.4.2
  • Ovirt » Ovirt » Version: 3.4.3
    cpe:2.3:a:ovirt:ovirt:3.4.3
  • Ovirt » Ovirt » Version: 3.4.4
    cpe:2.3:a:ovirt:ovirt:3.4.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved