CVE-2020-35497

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	ovirt-engine	ovirt-engine 4.4.3 and earlier

References

https://bugzilla.redhat.com/show_bug.cgi?id=1908755Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1908755Issue Tracking, Third Party Advisory

Timeline

Published: Dec 21, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-354987.5A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send CVE-2020-354996.7A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do CVE-2020-35508.1A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software co CVE-2020-355013.4A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the CVE-2020-355027.5A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy i CVE-2020-355036.0A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. CVE-2020-355046.0A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged gues CVE-2020-355054.4A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occur CVE-2020-355066.7A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handlin CVE-2020-355075.5There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able CVE-2020-355084.5A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process ident CVE-2020-355095.4A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticato