PT-2019-11608
CVE-2019-10183
·
Published
2019-07-03
·
Updated
2026-10-31
Description by
CVSS 3.1
3.3
LowMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
virt-manager version 2.2.0
Description:
The virt-install utility has introduced an option '--unattended' to create virtual machines without user interaction. This option accepts the guest VM password as command line arguments, potentially leaking them to other users on the system via process listing.
Recommendations:
For virt-manager version 2.2.0, consider avoiding the use of the '--unattended' option until a secure alternative is available, or restrict access to process listings to minimize the risk of password exposure.
Found an issue in the description? Have something to add? Feel free to write us 👾