6.9 Medium
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.5%
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.