VULNERABILITY INTELLIGENCE

CVE-2019-10183

CVSS score3.2 LOW
EPSS probability0.40%
CISA KEVNot currently listed
Published2019-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Description

Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced recently in the virt-manager v2.2.0 release.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references