CVE-2020-14301: redhat libvirt +12 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-14301

CVSS 6.5 · Medium EPSS 1,2%

Kerentanan Improper Removal of Sensitive Information Before Storage or Transfer pada redhat libvirt, redhat enterprise linux +11 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.

Rincian

Terbit di NVD: 27 Mei 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
EPSS (30 hari): 1,2% peluang dieksploitasi; lebih tinggi dari 67,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
redhat	libvirt	Versi 6.2.0 hingga sebelum 6.3.0
redhat	enterprise linux	Versi 8.0
redhat	enterprise linux eus	Versi 8.4
redhat	enterprise linux for ibm z systems	Versi 8.0
redhat	enterprise linux for ibm z systems eus	Versi 8.4
redhat	enterprise linux for power little endian	Versi 8.0
redhat	enterprise linux for power little endian eus	Versi 8.4
redhat	enterprise linux server aus	Versi 8.4
redhat	enterprise linux server for power little endian update services for sap solutions	Versi 8.4
redhat	enterprise linux server update services for sap solutions	Versi 8.4
redhat	enterprise linux tus	Versi 8.4
netapp	ontap select deploy administration utility	Semua versi
redhat	codeready linux builder	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://bugzilla.redhat.com/show_bug.cgi?id=1848640 issue tracking · patch · advisory vendor
https://security.netapp.com/advisory/ntap-20210629-0007/ advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.