Vulnerabilities > Ovirt > Ovirt Engine > 4.4.1.1

DATE CVE VULNERABILITY TITLE RISK
2020-12-21 CVE-2020-35497 Improper Access Control vulnerability in multiple products
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.
network
low complexity
ovirt redhat CWE-284
6.5