Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-35497

Опубликовано: 18 дек. 2020
Источник: redhat
CVSS3: 6.5

Описание

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.

A flaw was found in ovirt-engine 4.4.3 and earlier. This flaw allows an authenticated user to read other users' personal information, including the name, email, and public SSH key. The highest threat from this vulnerability is to confidentiality.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1220
https://bugzilla.redhat.com/show_bug.cgi?id=1908755ovirt-engine: non-admin user is able to access other users public SSH key

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
больше 5 лет назад

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.

github
больше 4 лет назад

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.

CVSS3: 6.5
fstec
больше 5 лет назад

Уязвимость средства управления виртуальной инфраструктурой Ovirt, связанная с раскрытием информации, позволяющая нарушителю получить доступ к открытому ключу SSH других пользователей

6.5 Medium

CVSS3