| Package | Affected versions | Patched versions |
|---|---|---|
| libvirt | = 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.2.0 |
libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free