VULNERABILITY INTELLIGENCE

CVE-2012-4411

CVSS score4.6 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2012-11-23
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:C/I:N/A:N

Description

The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references