Description
An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ovirt-engine
Default version status: unaffected
4.5.0 to < 4.5.6affected
Red Hat Red Hat Virtualization Engine 4.4
Default version status: affected
0:4.5.3.10-1.el8ev to < *unaffected