CVE-2019-3886CWE-862

An incorrect permissions check was discovered in libvirt 4.8.0 and above

Medium · published April 4, 2019

CVSS v3.0
5.4
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01117 · 65.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2019-04-04T00:00Z
EPSS history
Timeline
  • 04 APR 00:00Z
    An incorrect permissions check was discovered in libvirt 4.8.0 and above
    cvelistv5