CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 7.7
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: quick emulator (qemu) built with the virtfs, host directory sharing via plan 9 file system (9pfs) support, is vulnerable to an improper access control issue. it could occur while accessing files on a shared host directory. a privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-07-09
Last Modified Date: 2019-10-03