7.5
High
CVE-2024-0822 An authentication bypass vulnerability was found in overt-engine
Description
An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Virtualization Engine 4.4 | Versions not published |
References
- RHSA-2024:0934 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2258509 bugzilla.redhat.com
- github.com github.com
Timeline
- Published
- Last modified