27 matches found
CVE-2019-13314
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...
Design/Logic Flaw
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...
CVE-2019-13314
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...
CVE-2019-13314
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...
CVE-2019-13314
Concrete details found: CVE-2019-13314 affects virt-bootstrap; workaround/fix is delivered via openSUSE/SUSE-2020 security updates (openSUSE-2020-1856, 1787) for virt-bootstrap, addressing that the container root password could be supplied through a file. The patches fix the vulnerability by prev...
PT-2019-13250
Name of the Vulnerable Software and Affected Versions virt-bootstrap version 1.1.0 Description The issue allows local users to discover a root password by listing a process. This is because the root password may be present in the --root-password option to virt bootstrap.py. Recommendations For...
CVE-2019-13314: Exposure of Sensitive Information to an Unauthorized Actor
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virtbootstrap.py...