CVE-2020-14301

Published: May 27, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.

Affected (7)

Products: Redhat: Libvirt, Enterprise Linux Server Aus, Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions, Enterprise Linux Server Update Services For Sap Solutions, Enterprise Linux Tus, Codeready Linux Builder · Netapp: Ontap Select Deploy Administration Utility

Redhat

6 products

Libvirt

Enterprise Linux Server Aus

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

Enterprise Linux Server Update Services For Sap Solutions

Enterprise Linux Tus

Codeready Linux Builder

Netapp

1 product

Ontap Select Deploy Administration Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Libvirt	From 6.2.0 to 6.3.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Server Aus	Version 8.4
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.4
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 8.4
Redhat Enterprise Linux Tus	Version 8.4

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Ontap Select Deploy Administration Utility	All versions

Configuration D

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Redhat Codeready Linux Builder	All versions

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.4
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.4