virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2014-02-08T00:00:00

Updated: 2014-02-07T22:57:00

Reserved: 2011-04-19T00:00:00


Link: CVE-2011-1773

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2014-02-08T00:55:05.800

Modified: 2019-04-22T17:48:00.643


Link: CVE-2011-1773

JSON object: View

cve-icon Redhat Information

No data.

CWE