Find real vulnerabilities before they ship
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
Base Score
5.5
| Base Score | 5.5 |
|---|---|
| Vector String | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Base Severity | Medium |
| Version | 3.0 |
| Attack Vector (AV) | LOCAL |
