Information Disclosure

libvirt.so is vulnerable to information disclosures. A malicious user can use the VIRDOMAINXMLMIGRATABLE flag to implicitly enable the VIRDOMAINXMLSECURE flag, allowing a malicious user access to the VNC connection password...