The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3464 advisory.

    Virtual Machine Manager (virt-manager) is a graphical tool for administering virtual machines for KVM,     Xen, and Linux Containers (LXC). The virt-manager utility uses the libvirt API and can start, stop, add or     remove virtualized devices, connect to a graphical or serial console, and view resource usage statistics     for existing virtualized guests on local or remote machines.

    The following packages have been upgraded to a later upstream version: virt-manager (2.2.1). (BZ#1727881)

    Security Fix(es):

    * virt-install: unattended option leaks password via command line argument (CVE-2019-10183)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : virt-manager (RHSA-2019:3464)

low Nessus Plugin ID 130541

Version 1.5

Version 1.3

Version 1.5 Nov 7, 2024, 8:52 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411070852
Version 1.3 Apr 15, 2024, 12:50 PM CVSSv2 score source (set to "CVE-2019-10183") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202404151250