CVE-2014-0153

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted…

published September 8, 2014

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01334 · 70.7th percentile
Published
2014-09-08T14:00Z
EPSS history
Timeline
  • 08 SEP 14:00Z
    The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted…
    cvelistv5