CVE-2017-1000256: Improper Certificate Validation

libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default...

PT-2017-4106

Name of the Vulnerable Software and Affected Versions libvirt versions 2.3.0 and later Description The issue is related to errors in the certificate authentication procedure in the Libvirt virtualization management library. Exploitation of this issue allows a remote attacker to access confidentia...