Vulnerabilities > CVE-2020-14333 - Unspecified vulnerability in Ovirt Ovirt-Engine

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

ovirt

NVD

Published: 2020-08-18

Updated: 2024-11-21

Summary

A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other confidential information, or impersonate them within the application's context.

Vulnerable Configurations

Part	Description	Count
Application	Ovirt Ovirt Ovirt Engine - Ovirt Ovirt Engine 3.0.0 Ovirt Ovirt Engine 3.2 Ovirt Ovirt Engine 3.2.0 Ovirt Ovirt Engine 3.2.1 Ovirt Ovirt Engine 3.3.0 Ovirt Ovirt Engine 3.3.0.1 Ovirt Ovirt Engine 3.3.1 Ovirt Ovirt Engine 3.3.2 Ovirt Ovirt Engine 3.3.3 Ovirt Ovirt Engine 3.3.4 Ovirt Ovirt Engine 3.3.5 Ovirt Ovirt Engine 3.4.0 Ovirt Ovirt Engine 3.4.1 Ovirt Ovirt Engine 3.4.2 Ovirt Ovirt Engine 3.4.3 Ovirt Ovirt Engine 3.4.4 Ovirt Ovirt Engine 3.5.0 Ovirt Ovirt Engine 3.5.0.1 Ovirt Ovirt Engine 3.5.1 Ovirt Ovirt Engine 3.5.1.1 Ovirt Ovirt Engine 3.5.2 Ovirt Ovirt Engine 3.5.2.1 Ovirt Ovirt Engine 3.5.3 Ovirt Ovirt Engine 3.5.3.1 Ovirt Ovirt Engine 3.5.4 Ovirt Ovirt Engine 3.5.4.1 Ovirt Ovirt Engine 3.5.4.2 Ovirt Ovirt Engine 3.5.5 Ovirt Ovirt Engine 3.5.6 Ovirt Ovirt Engine 3.5.6.1 Ovirt Ovirt Engine 3.5.6.2 Ovirt Ovirt Engine 3.5.7 Ovirt Ovirt Engine 3.5.7.1 Ovirt Ovirt Engine 3.5.8 Ovirt Ovirt Engine 3.6.0 Ovirt Ovirt Engine 3.6.0.1 Ovirt Ovirt Engine 3.6.0.2 Ovirt Ovirt Engine 3.6.0.3 Ovirt Ovirt Engine 3.6.1 Ovirt Ovirt Engine 3.6.1.1 Ovirt Ovirt Engine 3.6.1.2 Ovirt Ovirt Engine 3.6.1.3 Ovirt Ovirt Engine 3.6.2 Ovirt Ovirt Engine 3.6.2.1 Ovirt Ovirt Engine 3.6.2.2 Ovirt Ovirt Engine 3.6.2.3 Ovirt Ovirt Engine 3.6.2.4 Ovirt Ovirt Engine 3.6.2.5 Ovirt Ovirt Engine 3.6.2.6 Ovirt Ovirt Engine 3.6.3 Ovirt Ovirt Engine 3.6.3.1 Ovirt Ovirt Engine 3.6.3.2 Ovirt Ovirt Engine 3.6.3.3 Ovirt Ovirt Engine 3.6.3.4 Ovirt Ovirt Engine 3.6.4.1 Ovirt Ovirt Engine 3.6.5 Ovirt Ovirt Engine 3.6.5.2 Ovirt Ovirt Engine 3.6.5.3 Ovirt Ovirt Engine 3.6.6 Ovirt Ovirt Engine 3.6.6.1 Ovirt Ovirt Engine 3.6.6.2 Ovirt Ovirt Engine 3.6.7 Ovirt Ovirt Engine 3.6.7.1 Ovirt Ovirt Engine 3.6.7.2 Ovirt Ovirt Engine 3.6.7.3 Ovirt Ovirt Engine 3.6.7.4 Ovirt Ovirt Engine 3.6.7.5 Ovirt Ovirt Engine 3.6.8 Ovirt Ovirt Engine 3.6.8.1 Ovirt Ovirt Engine 3.6.9 Ovirt Ovirt Engine 3.6.9.1 Ovirt Ovirt Engine 3.6.9.2 Ovirt Ovirt Engine 3.6.10 Ovirt Ovirt Engine 3.6.10. Ovirt Ovirt Engine 3.6.11 Ovirt Ovirt Engine 3.6.11. Ovirt Ovirt Engine 3.6.12 Ovirt Ovirt Engine 3.6.12. Ovirt Ovirt Engine 3.6.13 Ovirt Ovirt Engine 3.6.13. Ovirt Ovirt Engine 4-0.7.2 Ovirt Ovirt Engine 4.0.0 Ovirt Ovirt Engine 4.0.0.1 Ovirt Ovirt Engine 4.0.0.2 Ovirt Ovirt Engine 4.0.0.3 Ovirt Ovirt Engine 4.0.0.4 Ovirt Ovirt Engine 4.0.0.5 Ovirt Ovirt Engine 4.0.0.6 Ovirt Ovirt Engine 4.0.1 Ovirt Ovirt Engine 4.0.1.1 Ovirt Ovirt Engine 4.0.2 Ovirt Ovirt Engine 4.0.2.1 Ovirt Ovirt Engine 4.0.2.2 Ovirt Ovirt Engine 4.0.2.3 Ovirt Ovirt Engine 4.0.2.4 Ovirt Ovirt Engine 4.0.2.5 Ovirt Ovirt Engine 4.0.2.6 Ovirt Ovirt Engine 4.0.2.7 Ovirt Ovirt Engine 4.0.3 Ovirt Ovirt Engine 4.0.4 Ovirt Ovirt Engine 4.0.4.1 Ovirt Ovirt Engine 4.0.4.2 Ovirt Ovirt Engine 4.0.4.3 Ovirt Ovirt Engine 4.0.4.4 Ovirt Ovirt Engine 4.0.5 Ovirt Ovirt Engine 4.0.5.1 Ovirt Ovirt Engine 4.0.5.2 Ovirt Ovirt Engine 4.0.5.3 Ovirt Ovirt Engine 4.0.5.4 Ovirt Ovirt Engine 4.0.5.5 Ovirt Ovirt Engine 4.0.6 Ovirt Ovirt Engine 4.0.6.1 Ovirt Ovirt Engine 4.0.6.2 Ovirt Ovirt Engine 4.0.6.3 Ovirt Ovirt Engine 4.0.7 Ovirt Ovirt Engine 4.0.7.1 Ovirt Ovirt Engine 4.0.7.2 Ovirt Ovirt Engine 4.0.7.3 Ovirt Ovirt Engine 4.0.7.4 Ovirt Ovirt Engine 4.0.7.5 Ovirt Ovirt Engine 4.1.0 Ovirt Ovirt Engine 4.1.0.1 Ovirt Ovirt Engine 4.1.0.2 Ovirt Ovirt Engine 4.1.0.3 Ovirt Ovirt Engine 4.1.0.4 Ovirt Ovirt Engine 4.1.1 Ovirt Ovirt Engine 4.1.1.1 Ovirt Ovirt Engine 4.1.1.2 Ovirt Ovirt Engine 4.1.1.3 Ovirt Ovirt Engine 4.1.1.4 Ovirt Ovirt Engine 4.1.1.5 Ovirt Ovirt Engine 4.1.1.6 Ovirt Ovirt Engine 4.1.1.7 Ovirt Ovirt Engine 4.1.1.8 Ovirt Ovirt Engine 4.1.2 Ovirt Ovirt Engine 4.1.2.1 Ovirt Ovirt Engine 4.1.2.2 Ovirt Ovirt Engine 4.1.2.3 Ovirt Ovirt Engine 4.1.3 Ovirt Ovirt Engine 4.1.3.1 Ovirt Ovirt Engine 4.1.3.2 Ovirt Ovirt Engine 4.1.3.3 Ovirt Ovirt Engine 4.1.3.4 Ovirt Ovirt Engine 4.1.3.5 Ovirt Ovirt Engine 4.1.4 Ovirt Ovirt Engine 4.1.4.1 Ovirt Ovirt Engine 4.1.4.2 Ovirt Ovirt Engine 4.1.5 Ovirt Ovirt Engine 4.1.5.1 Ovirt Ovirt Engine 4.1.5.2 Ovirt Ovirt Engine 4.1.6 Ovirt Ovirt Engine 4.1.6.1 Ovirt Ovirt Engine 4.1.6.2 Ovirt Ovirt Engine 4.1.7 Ovirt Ovirt Engine 4.1.7.1 Ovirt Ovirt Engine 4.1.7.2 Ovirt Ovirt Engine 4.1.7.3 Ovirt Ovirt Engine 4.1.7.4 Ovirt Ovirt Engine 4.1.7.5 Ovirt Ovirt Engine 4.1.7.6 Ovirt Ovirt Engine 4.1.8 Ovirt Ovirt Engine 4.1.8.1 Ovirt Ovirt Engine 4.1.8.2 Ovirt Ovirt Engine 4.1.9 Ovirt Ovirt Engine 4.1.9.1 Ovirt Ovirt Engine 4.1.9.2 Ovirt Ovirt Engine 4.1.10 Ovirt Ovirt Engine 4.1.10.1 Ovirt Ovirt Engine 4.1.10.2 Ovirt Ovirt Engine 4.1.10.3 Ovirt Ovirt Engine 4.1.10.4 Ovirt Ovirt Engine 4.1.11 Ovirt Ovirt Engine 4.1.11.1 Ovirt Ovirt Engine 4.1.11.2 Ovirt Ovirt Engine 4.2.0 Ovirt Ovirt Engine 4.2.0.1 Ovirt Ovirt Engine 4.2.0.2 Ovirt Ovirt Engine 4.2.1 Ovirt Ovirt Engine 4.2.1.1 Ovirt Ovirt Engine 4.2.1.2 Ovirt Ovirt Engine 4.2.1.3 Ovirt Ovirt Engine 4.2.1.4 Ovirt Ovirt Engine 4.2.1.5 Ovirt Ovirt Engine 4.2.1.6 Ovirt Ovirt Engine 4.2.1.7 Ovirt Ovirt Engine 4.2.2 Ovirt Ovirt Engine 4.2.2.1 Ovirt Ovirt Engine 4.2.2.2 Ovirt Ovirt Engine 4.2.2.3 Ovirt Ovirt Engine 4.2.2.4 Ovirt Ovirt Engine 4.2.2.5 Ovirt Ovirt Engine 4.2.2.6 Ovirt Ovirt Engine 4.2.3 Ovirt Ovirt Engine 4.2.3.1 Ovirt Ovirt Engine 4.2.3.2 Ovirt Ovirt Engine 4.2.3.3 Ovirt Ovirt Engine 4.2.3.4 Ovirt Ovirt Engine 4.2.3.5 Ovirt Ovirt Engine 4.2.3.6 Ovirt Ovirt Engine 4.2.3.7 Ovirt Ovirt Engine 4.2.3.8 Ovirt Ovirt Engine 4.2.4 Ovirt Ovirt Engine 4.2.4.1 Ovirt Ovirt Engine 4.2.4.2 Ovirt Ovirt Engine 4.2.4.3 Ovirt Ovirt Engine 4.2.4.4 Ovirt Ovirt Engine 4.2.4.5 Ovirt Ovirt Engine 4.2.5 Ovirt Ovirt Engine 4.2.5.1 Ovirt Ovirt Engine 4.2.5.2 Ovirt Ovirt Engine 4.2.5.3 Ovirt Ovirt Engine 4.2.5.4 Ovirt Ovirt Engine 4.2.6 Ovirt Ovirt Engine 4.2.6.1 Ovirt Ovirt Engine 4.2.6.2 Ovirt Ovirt Engine 4.2.6.3 Ovirt Ovirt Engine 4.2.6.4 Ovirt Ovirt Engine 4.2.7 Ovirt Ovirt Engine 4.2.7.1 Ovirt Ovirt Engine 4.2.7.2 Ovirt Ovirt Engine 4.2.7.3 Ovirt Ovirt Engine 4.2.7.4 Ovirt Ovirt Engine 4.2.7.5 Ovirt Ovirt Engine 4.2.8 Ovirt Ovirt Engine 4.2.8.1 Ovirt Ovirt Engine 4.2.8.2 Ovirt Ovirt Engine 4.2.8.3 Ovirt Ovirt Engine 4.2.8.4 Ovirt Ovirt Engine 4.2.8.5 Ovirt Ovirt Engine 4.2.8.6 Ovirt Ovirt Engine 4.2.8.7 Ovirt Ovirt Engine 4.2.8.8 Ovirt Ovirt Engine 4.2.8.9 Ovirt Ovirt Engine 4.3.0 Ovirt Ovirt Engine 4.3.0.1 Ovirt Ovirt Engine 4.3.0.2 Ovirt Ovirt Engine 4.3.0.3 Ovirt Ovirt Engine 4.3.0.4 Ovirt Ovirt Engine 4.3.1 Ovirt Ovirt Engine 4.3.1.1 Ovirt Ovirt Engine 4.3.2 Ovirt Ovirt Engine 4.3.2.1 Ovirt Ovirt Engine 4.3.3 Ovirt Ovirt Engine 4.3.3.1 Ovirt Ovirt Engine 4.3.3.2 Ovirt Ovirt Engine 4.3.3.3 Ovirt Ovirt Engine 4.3.3.4 Ovirt Ovirt Engine 4.3.3.5 Ovirt Ovirt Engine 4.3.3.6 Ovirt Ovirt Engine 4.3.3.7 Ovirt Ovirt Engine 4.3.4 Ovirt Ovirt Engine 4.3.4.1 Ovirt Ovirt Engine 4.3.4.2 Ovirt Ovirt Engine 4.3.4.3 Ovirt Ovirt Engine 4.3.5 Ovirt Ovirt Engine 4.3.5.1 Ovirt Ovirt Engine 4.3.5.2 Ovirt Ovirt Engine 4.3.5.3 Ovirt Ovirt Engine 4.3.5.4 Ovirt Ovirt Engine 4.3.5.5 Ovirt Ovirt Engine 4.3.5.6 Ovirt Ovirt Engine 4.3.6 Ovirt Ovirt Engine 4.3.6.1 Ovirt Ovirt Engine 4.3.6.2 Ovirt Ovirt Engine 4.3.6.3 Ovirt Ovirt Engine 4.3.6.4 Ovirt Ovirt Engine 4.3.6.5 Ovirt Ovirt Engine 4.3.6.6 Ovirt Ovirt Engine 4.3.6.7 Ovirt Ovirt Engine 4.3.7.0 Ovirt Ovirt Engine 4.3.7.1 Ovirt Ovirt Engine 4.3.7.2 Ovirt Ovirt Engine 4.3.8 Ovirt Ovirt Engine 4.3.8.0 Ovirt Ovirt Engine 4.3.8.1 Ovirt Ovirt Engine 4.3.8.2 Ovirt Ovirt Engine 4.3.9.0 Ovirt Ovirt Engine 4.3.9.1 Ovirt Ovirt Engine 4.3.9.2 Ovirt Ovirt Engine 4.3.9.3 Ovirt Ovirt Engine 4.3.9.4 Ovirt Ovirt Engine 4.3.10 Ovirt Ovirt Engine 4.3.10.1 Ovirt Ovirt Engine 4.3.10.2 Ovirt Ovirt Engine 4.3.10.3 Ovirt Ovirt Engine 4.3.10.4 Ovirt Ovirt Engine 4.3.11 Ovirt Ovirt Engine 4.3.11.1 Ovirt Ovirt Engine 4.3.11.2 Ovirt Ovirt Engine 4.3.11.3 Ovirt Ovirt Engine 4.3.11.4 Ovirt Ovirt Engine 4.4.0	358

Summary

Vulnerable Configurations

References