An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2021-05-27T19:44:34
Updated: 2024-08-04T12:39:36.274Z
Reserved: 2020-06-17T00:00:00
Link: CVE-2020-14301
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-05-27T20:15:07.727
Modified: 2024-11-21T05:02:57.587
Link: CVE-2020-14301
Redhat