exploitDog

CVE-2014-3485

Опубликовано: 30 июн. 2014

Источник: redhat

CVSS2: 4

EPSS Низкий

Описание

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2014-3485
https://nvd.nist.gov/vuln/detail/CVE-2014-3485

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-611

https://bugzilla.redhat.com/show_bug.cgi?id=1107472ovirt-engine-api: XML eXternal Entity (XXE) flaw

EPSS

Процентиль: 71%

0.01483

Низкий

4 Medium

CVSS2

Связанные уязвимости

CVE-2014-3485

nvd

около 12 лет назад

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

GHSA-6g69-jrpm-4wp2

github

около 4 лет назад

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

EPSS

Процентиль: 71%

0.01483

Низкий

4 Medium

CVSS2