Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/?langue=2

SYNTHESIS OF THE VULNERABILITY

Impacted products: SUSE Linux Enterprise Desktop, SLES, Xen.

Severity: 1/4.

Consequences: data reading.

Provenance: privileged shell.

Confidence: confirmed by the editor (5/5).

Creation date: 11/11/2020.

DESCRIPTION OF THE VULNERABILITY

An attacker, inside a guest system, can bypass access restrictions to data via Power Interfaces Weak Access of Xen, in order to obtain sensitive information on the host system.

ACCESS TO THE FULL VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/...