REDHAT-BUG-1154977: Medium severity ovirt engine vulnerability
Ovirt-engine did not verify key attributes from the the vdsm X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL certificate with invalid attributes that would otherwise prevent an certificate from being presented as valid
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1154977?
The severity of REDHAT-BUG-1154977 has been classified as important due to its potential to allow man-in-the-middle attacks.
How do I fix REDHAT-BUG-1154977?
To fix REDHAT-BUG-1154977, ensure that you update your oVirt Engine software to the latest version that includes security patches.
What are the potential impacts of REDHAT-BUG-1154977?
The potential impacts of REDHAT-BUG-1154977 include the risk of an attacker successfully spoofing an SSL certificate, leading to unauthorized access or data breaches.
Which versions of Ovirt Engine are affected by REDHAT-BUG-1154977?
All versions of oVirt Engine that do not implement verification of key attributes in vdsm X.509 certificates are affected by REDHAT-BUG-1154977.
Is there a workaround for REDHAT-BUG-1154977 while waiting for a fix?
Currently, there are no recommended workarounds for REDHAT-BUG-1154977, so updating to the latest secure version is advised.