Unspecified Ovirt-engine
2 CVEs affecting Unspecified Ovirt-engine. Latest disclosed: 2019-03-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3879 | High | 8.1 | 2019-03-25 | It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation… |
CVE-2018-1074 | High | 7.7 | 2018-04-26 | ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleart… |