CVE-2014-3485
Red Hat Enterprise Virtualization 3.4 - Authenticated XML External Entity Injection
Title source: llmDescription
The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030501
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0814.html
Scores
EPSS
0.0148
EPSS Percentile
70.9%
Details
CWE
CWE-200
Status
published
Products (1)
redhat/enterprise_virtualization
3.4
Published
Jul 11, 2014
Tracked Since
Feb 18, 2026