CVE-2019-19336 - ovirt-engine: response_type parameter allows reflected XSS

Back Back to CVE browser

MEDIUM

ovirt-engine: response_type parameter allows reflected XSS

Published Mar 19, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.96%

Description

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.

Affected products

Vendor Red Hat Product Ovirt-Engine Default
n/a
- Version
  4.3.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Red Hat

Ovirt-Engine

n/a

Version	Status	Constraints
4.3.8	affected	-

Red Hat Virtualization Engine 4.3

org.ovirt.engine-root-0:4.3.8.2-4

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

ovirt-engine-dwh-0:4.3.8-1.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

ovirt-engine-metrics-0:1.3.6.2-1.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

ovirt-fast-forward-upgrade-0:1.0.0-16.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

ovirt-imageio-common-0:1.5.3-0.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

ovirt-imageio-proxy-0:1.5.3-0.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

ovirt-web-ui-0:1.6.0-2.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

rhv-log-collector-analyzer-0:0.2.15-0.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.3

v2v-conversion-host-0:1.16.0-3.el7ev

Fixed · RHSA-2020:0498
Red Hat Virtualization Engine 4.4

org.ovirt.engine-root-0:4.4.1.8-7

Fixed · RHSA-2020:3247

Product	Package	State	Advisory
Red Hat Virtualization Engine 4.3	org.ovirt.engine-root-0:4.3.8.2-4	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	ovirt-engine-dwh-0:4.3.8-1.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	ovirt-engine-metrics-0:1.3.6.2-1.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	ovirt-fast-forward-upgrade-0:1.0.0-16.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	ovirt-imageio-common-0:1.5.3-0.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	ovirt-imageio-proxy-0:1.5.3-0.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	ovirt-web-ui-0:1.6.0-2.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	rhv-log-collector-analyzer-0:0.2.15-0.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.3	v2v-conversion-host-0:1.16.0-3.el7ev	Fixed	RHSA-2020:0498
Red Hat Virtualization Engine 4.4	org.ovirt.engine-root-0:4.4.1.8-7	Fixed	RHSA-2020:3247

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://access.redhat.com/security/cve/CVE-2019-19336
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1781001
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19336
x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19336
https://www.cve.org/CVERecord?id=CVE-2019-19336

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-19336		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1781001		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19336		x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19336
https://www.cve.org/CVERecord?id=CVE-2019-19336