Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mpx4-8rp2-j882

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

EPSS

Процентиль: 44%
0.00217
Низкий

Дефекты

CWE-200

Связанные уязвимости

redhat
почти 12 лет назад

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

nvd
больше 11 лет назад

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

EPSS

Процентиль: 44%
0.00217
Низкий

Дефекты

CWE-200