Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:10786
HistoryJan 15, 2019 - 8:52 a.m.

Unauthorized Access

2019-01-1508:52:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

libvirt is vulnerable to unauthorized access attacks. The vulnerability exists as libvirt does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.

References

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P