CVE-2020-14301CWE-212

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

published May 27, 2021

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01196 · 67.8th percentile
Weakness
CWE-212 · Improper Removal of Sensitive Information Before Storage or Transfer
Published
2021-05-27T19:44Z
EPSS history
Timeline
  • 27 MAY 19:44Z
    An information disclosure vulnerability was found in libvirt in versions before 6.3.0
    cvelistv5