Medium severity6.8NVD Advisory· Published Apr 20, 2017· Updated Jun 17, 2026
CVE-2016-6338
CVE-2016-6338
Description
ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4(expand)+ 1 more
- (no CPE)
- (no CPE)range: 4.0
- cpe:2.3:a:redhat:enterprise_virtualization:4.0:*:*:*:*:*:*:*
- Range: 4.0
Patches
Vulnerability mechanics
References
3- bugzilla.redhat.com/show_bug.cginvdExploitIssue Tracking
- www.securityfocus.com/bid/92666nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2017:3427nvd
News mentions
0No linked articles in our index yet.