2 matches found
virt-v2v: vnc password protection is missing after vm conversion
virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password...
4.4CVSS5.8AI score0.00471EPSS
SaveExploits1References4
PT-2014-2113
Name of the Vulnerable Software and Affected Versions virt-v2v versions prior to 0.8.4 Description The issue allows local users to bypass the intended VNC authentication by connecting without a password, as the VNC console password is not preserved when converting a guest. Recommendations For...
4.4CVSS0.00471EPSS
SaveExploits1References9
20