title: Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0
description: CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix ovirt-engine: cross-site request forgery (CSRF) ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix
cpes: cpe:/a:redhat:rhev_manager:3