Search/CVE-2015-0236
● CVE

CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

View graph Watch Export
CVSS v3.1
—
EPSS
1.80%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Connections
8 relationships
Timeline
disclosure → media coverage
Jan 29, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026