CVE-2020-14301: Medium severity red hat libvirt-daemon-driver-storage-iscsi-direct vulnerability
An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the dumpxml command.
Other sources
An information disclosure vulnerability was found in libvirt. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw could allow a malicious user with a read-only connection to access potentially sensitive information in the domain configuration via the dumpxml command.
Starting with version 6.2.0, libvirt makes it possible to pass one or more cookies to access disk images via http/https network protocols:
<disk type="network" device="cdrom"> <source protocol="https" name="/path/to/image.iso"> <cookies> <cookie name="cookiename">"cookievalue"</cookie> </cookies> </disk>
The 'cookie' element is included in the XML dump of the guest domain, resulting in a possible information disclosure. An attacker could abuse this flaw to leak the cookie's value via the virsh dumpxml command. Since cookies typically contain sensitive information, they should only be included in the XML dump when using the --security-info attribute.
Upstream fix: https://github.com/libvirt/libvirt/commit/a5b064bf4b17a9884d7d361733737fb614ad8979 https://github.com/libvirt/libvirt/commit/524de6cc35d3b222f0e940bb0fd027f5482572c5
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-14301?
CVE-2020-14301 is an information disclosure vulnerability found in libvirt before version 6.3.0.
What is the severity of CVE-2020-14301?
The severity of CVE-2020-14301 is medium with a CVSS score of 6.5.
How does CVE-2020-14301 affect libvirt?
CVE-2020-14301 allows a malicious user with a read-only connection to access potentially sensitive information in the domain configuration via HTTP cookies.
What is the remedy for CVE-2020-14301?
To fix CVE-2020-14301, users should update to libvirt version 6.3.0 or later.
Where can I find more information about CVE-2020-14301?
You can find more information about CVE-2020-14301 at the following references: [CVE-2020-14301](https://www.cve.org/CVERecord?id=CVE-2020-14301), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2020-14301), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1848640), [Red Hat Security Advisory](https://access.redhat.com/errata/RHBA-2020:3172).