CVE-2011-3571 Information disclosure in n/a

What is CVE-2011-3571?

CVE-2011-3571 is a low-severity vulnerability in n/a, published on 18 Jan 2012. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.

Which versions are affected by CVE-2011-3571?

It affects 1 product.

Products include Oracle Virtualization.

How do I fix CVE-2011-3571?

Apply the vendor's patch.

Is CVE-2011-3571 being exploited?

There is no known exploitation of CVE-2011-3571 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-3779 Other in n/a High 7.5
• CVE-2011-3538 Auth bypass in n/a Medium 6.8
• CVE-2015-2581 Other in n/a Medium 6.4
• CVE-2014-2439 Other in n/a Medium 6.4
• CVE-2021-20191 Insertion of Sensitive Information into Log File in ansible Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fjgc-8pc6-5qr3.