Red Hat Security AdvisoryRHSA-2011:1615
virt-v2v security and bug fix update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) virt-v2v-0.8.3-5.el6
- Red Hat Enterprise Linux HPC Node (v. 6) virt-v2v-0.8.3-5.el6
- Red Hat Enterprise Linux Server (v. 6) virt-v2v-0.8.3-5.el6
- Red Hat Enterprise Linux Workstation (v. 6) virt-v2v-0.8.3-5.el6
Fixes 1 record
Priority LOW 21
virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00471 · Published 2014-02-08 · Partial fix CWE-255
