Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.Referenceshttp://gerrit.ovirt.org/#/c/25959/http://www.ovirt.org/Security_advisories