Open Redirect Vulnerability in oVirt Engine by Red Hat

CVE-2020-10775

Summary

An Open Redirect vulnerability exists in oVirt Engine versions 4.4 and earlier, allowing remote attackers to deceive users into visiting malicious websites. This could facilitate phishing attacks, as unsuspecting users will be redirected without clear visibility of the destination URL. When exploited, this vulnerability poses a significant risk to user confidentiality, as attackers can trick users into disclosing sensitive information.

References