CVE-2022-44020
VirtualBMC: removes password protection from the managed libvirt XML domain
An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products