CVE-2019-13314

virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...

Design/Logic Flaw

virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...

CVE-2019-13314

virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...

CVE-2019-13314

Concrete details found: CVE-2019-13314 affects virt-bootstrap; workaround/fix is delivered via openSUSE/SUSE-2020 security updates (openSUSE-2020-1856, 1787) for virt-bootstrap, addressing that the container root password could be supplied through a file. The patches fix the vulnerability by prev...