CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the…

published January 29, 2015

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01802 · 78.2th percentile
Published
2015-01-29T15:00Z
EPSS history
Timeline
  • 29 JAN 15:00Z
    libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the…
    cvelistv5