| Package | Affected versions | Patched versions |
|---|---|---|
| libvirt | ≥ 6.2.0, < 6.3.0 | 6.3.0 |
An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free