CVE-2019-10183

3.3 lowEPSS 0.4%

Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced recently in the virt-manager v2.2.0 release.

Severity

CVSS 3.0

3.3 low

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-07-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:enterprise_linux
redhat:virt-manager

References

http://www.securityfocus.com/bid/109027
https://access.redhat.com/errata/RHSA-2019:3464
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10183
http://www.securityfocus.com/bid/109027
https://access.redhat.com/errata/RHSA-2019:3464

Check your stack JSON