CVE-2015-0236 in libvirt
Resumen (Inglés)
libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.
Reservar
2014-11-18
Divulgación
2015-01-29
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 69177 | libvirt Snapshot virDomainSaveImageGetXMLDesc Contraseña divulgación de información | 200 | No probado | Arreglo oficial | CVE-2015-0236 |