Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat libvirt 安全漏洞
Vulnerability Description
Red Hat libvirt是美国红帽（Red Hat）公司的一个用于实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Red Hat libvirt 2.0.0之前的版本中存在安全漏洞，该漏洞源于当VNC服务器密码设置为空字符串事，程序没有正确禁用密码检查。远程攻击者可通过连接服务器利用该漏洞绕过身份验证并建立VNC会话。
CVSS Information
N/A
Vulnerability Type
N/A