CVE-2019-10183
- State
- Published
- Severity
- 3.2 Low
- Published
- Jul 3, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 27, 2019
Description
Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced recently in the virt-manager v2.2.0 release.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 3.2 Low | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
virt-installRed Hat |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10183
- 109027vdb-entry
- RHSA-2019:3464vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.