CVE-2015-0236 in libvirt

Résumé (Anglaise)

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

Réserver

18/11/2014

Divulgation

29/01/2015

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
69177	libvirt Snapshot virDomainSaveImageGetXMLDesc Mot de passe divulgation d'information	200	Non prouvée	Correctif officiel	CVE-2015-0236