CVE-2014-0153: Ovirt

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

Affected products

• Ovirt Ovirt: up to and including 3.4.0

Published 2014-09-08. Last modified 2026-06-17.