CVE-2019-10183CWE-200

Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction

Low · published July 3, 2019

CVSS v3.0
3.2
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced recently in the virt-manager v2.2.0 release.

The record
Technical detail
CVSS v3.0
3.2 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-07-03T13:36Z
EPSS history
Timeline
  • 03 JUL 13:36Z
    Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction
    cvelistv5