CVE-2014-0028

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain…

published January 24, 2014

CVSS
—
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00623 · 48.9th percentile
Published
2014-01-24T18:00Z
EPSS history
Timeline
  • 24 JAN 18:00Z
    libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain…
    cvelistv5