Threats tagged 'ghsa-8p9r-6652-9xc4'

A vulnerability in the cockpit-machines component of Red Hat Enterprise Linux 10 allows local attackers with process inspection capabilities to view sensitive guest VM credentials. These credentials are passed as JSON command-line arguments during VM creation or installation, making them visible in process listings while the installation workflow is active. The exposure depends on host process-visibility policies and is limited to the installation period.