CVE-2015-3251

EPSS 0.18%
Veröffentlicht 08.02.2016 19:59:01
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Cloudstack Version4.4.4

Apache ≫ Cloudstack Version4.5.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.362

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	1.2	3.6	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E

Vendor Advisory

http://www.securityfocus.com/archive/1/537458/100/0/threaded

https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-3251

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-3251

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-3251

EUVD