Lucene search

K
nvd[email protected]NVD:CVE-2014-0028
HistoryJan 24, 2014 - 6:55 p.m.

CVE-2014-0028

2014-01-2418:55:04
CWE-264
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:N/A:P

7.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.

Affected configurations

NVD
Node
redhatlibvirtMatch1.1.1
OR
redhatlibvirtMatch1.1.2
OR
redhatlibvirtMatch1.1.3
OR
redhatlibvirtMatch1.1.4
OR
redhatlibvirtMatch1.2.0

4.3 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:N/A:P

7.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%