Ovirt: authentication bypass

CVE-2024-0822

What is CVE-2024-0822?

An authentication bypass vulnerability has been identified in the oVirt Engine, a management platform for virtualized environments. This flaw is associated with the CreateUserSession command, which does not properly authenticate users. As a result, unauthorized individuals can exploit this vulnerability to create new user accounts within the system, leading to potential unauthorized access and control over the virtual infrastructure. Organizations utilizing oVirt Engine should apply the relevant updates to mitigate this security risk.

References