CVE-2014-3485

N/A

Descricao

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado7/11/2014

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

redhat:enterprise_virtualization

Fraquezas (CWE)

CWE-200

Referencias

http://rhn.redhat.com/errata/RHSA-2014-0814.html(secalert@redhat.com)

http://www.securitytracker.com/id/1030501(secalert@redhat.com)

http://rhn.redhat.com/errata/RHSA-2014-0814.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1030501(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.