CVE-2020-10775
First published: Tue Jun 16 2020(Updated: )
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/ovirt-engine | <4.4.2 | 4.4.2 |
| Oracle Virtualization | =4.0 | |
| Red Hat oVirt Engine | <=4.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1847420
- https://access.redhat.com/errata/RHSA-2020:3247
- https://access.redhat.com/security/cve/cve-2020-10775
- https://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=commit;h=6953a1072f5a563664fd8992f31637dae66435fc
- https://www.ovirt.org/release/4.4.2/
- https://www.cve.org/CVERecord?id=CVE-2020-10775 https://nvd.nist.gov/vuln/detail/CVE-2020-10775
Frequently Asked Questions
What is CVE-2020-10775?
CVE-2020-10775 is an open redirect vulnerability found in ovirt-engine versions 4.4 and earlier that allows remote attackers to redirect users to arbitrary websites and attempt phishing attacks.
What is the severity of CVE-2020-10775?
The severity of CVE-2020-10775 is medium with a CVSS score of 5.3.
How can the open redirect vulnerability in ovirt-engine be fixed?
To fix the open redirect vulnerability in ovirt-engine, users should update to version 4.4.2 or later.
What is the affected software for CVE-2020-10775?
The affected software for CVE-2020-10775 includes ovirt-engine versions 4.4.1 and earlier.
Where can I find more information about CVE-2020-10775?
More information about CVE-2020-10775 can be found at the following references: [CVE-2020-10775](https://www.cve.org/CVERecord?id=CVE-2020-10775), [NIST CVE-2020-10775](https://nvd.nist.gov/vuln/detail/CVE-2020-10775), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1847420), and [Red Hat Advisory RHSA-2020:3247](https://access.redhat.com/errata/RHSA-2020:3247).
- collector/redhat-cve
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/event
- agent/severity
- agent/author
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-10775
- agent/software-canonical-lookup
- agent/trending
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/oracle
- canonical/oracle virtualization
- version/oracle virtualization/4.0
- vendor/redhat
- canonical/red hat ovirt engine
- version/red hat ovirt engine/4.4