Red Hat Security Advisory: Red Hat Virtualization Engine security, bug fix and enhancement update
An update is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19336US | medium6.1 | — | ||
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2020:0498self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1688781external
- 1739106external
- 1754979external
- 1757423external
- 1772506external
- 1773580external
remediations (41)
- Fixedovirt-engine-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-0:4.3.8.2-0.4.el7.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-backend-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-dbscripts-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-dwh-0:4.3.8-1.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-dwh-0:4.3.8-1.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-dwh-setup-0:4.3.8-1.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-extensions-api-impl-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-extensions-api-impl-javadoc-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-health-check-bundler-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-metrics-0:1.3.6.2-1.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-metrics-0:1.3.6.2-1.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-restapi-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-base-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-plugin-cinderlib-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-plugin-ovirt-engine-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-plugin-ovirt-engine-common-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-plugin-vmconsole-proxy-helper-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-setup-plugin-websocket-proxy-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-tools-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-tools-backup-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-vmconsole-proxy-helper-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-webadmin-portal-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-engine-websocket-proxy-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-fast-forward-upgrade-0:1.0.0-16.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-fast-forward-upgrade-0:1.0.0-16.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-imageio-common-0:1.5.3-0.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-imageio-common-0:1.5.3-0.el7ev.x86_64 as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-imageio-common-debuginfo-0:1.5.3-0.el7ev.x86_64 as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-imageio-proxy-0:1.5.3-0.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-imageio-proxy-0:1.5.3-0.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-imageio-proxy-setup-0:1.5.3-0.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-web-ui-0:1.6.0-2.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedovirt-web-ui-0:1.6.0-2.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedpython2-ovirt-engine-lib-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedrhv-log-collector-analyzer-0:0.2.15-0.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedrhv-log-collector-analyzer-0:0.2.15-0.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedrhvm-0:4.3.8.2-0.4.el7.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedv2v-conversion-host-0:1.16.0-3.el7ev.src as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498 - Fixedv2v-conversion-host-ansible-0:1.16.0-3.el7ev.noarch as a component of RHV-M 4.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:0498
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan