Skip to content
fr Sign in
Not rated

CVE-2020-14301 An information disclosure vulnerability was found in libvirt in versions before 6.3.0

Description

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.

Affected products and versions

Product Affected versions Fixed in
libvirt Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of libvirt

The 11 CVEs of libvirt →
CVE-2023-2700 A vulnerability was found in libvirt 5.5 Medium CVE-2021-3975 A use-after-free flaw was found in libvirt Not rated CVE-2022-0897 A flaw was found in the libvirt nwfilter driver Not rated CVE-2021-4147 A flaw was found in the libvirt libxl driver Not rated
Track this CVE