Threats tagged 'ghsa-223c-8f3h-q9f9'

A vulnerability in libvirt causes external inactive snapshots for shut-down virtual machines to be created with world-readable permissions. This allows unprivileged local users to access and inspect the contents of the guest operating system, leading to information disclosure. The issue affects local users with low complexity to exploit and does not require user interaction. No fix or mitigation meeting Red Hat's criteria is currently available.