Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat oVirt 跨站请求伪造漏洞
Vulnerability Description
Red Hat oVirt是美国红帽（Red Hat）公司的一套开源的虚拟化管理平台，是RHEV（企业虚拟化平台）的开源版本，由ovirt-node客户端和overt-engine管理端组成。 Red Hat oVirt 3.5.0 beta2之前版本存在跨站点请求伪造漏洞，该漏洞源于允许远程攻击者通过劫持用户请求执行未指定操作。
CVSS Information
N/A
Vulnerability Type
N/A