CVE-2016-6338

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to…

published April 20, 2017

CVSS
—
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00519 · 43.2th percentile
Published
2017-04-20T17:00Z
EPSS history
Timeline
  • 20 APR 17:00Z
    ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to…
    cvelistv5