CVEvulnerability

CVE-2020-10775

5.3 MEDIUM Published 2020-08-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
CWE-451, CWE-601

Description

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

Affected configurations

• oracle virtualization 4.0 • redhat ovirt-engine (<= 4.4)

Related

Weakness · CWE (2)

  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
  • CWE-601 URL Redirection to Untrusted Site weakness

References