CVE-2012-5616
First published: Tue Jan 22 2013(Updated: )
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1) the SSH private key as recorded by the createSSHKeyPair API, (2) the password of an added host as recorded by the AddHost API, or the password of an added VM as recorded by the (3) DeployVM or (4) ResetPasswordForVM API.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache CloudStack | =4.0.0-incubating | |
| Citrix CloudPlatform | <=3.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-users/201301.mbox/%3C1BD2169F-BBFE-4E27-B50F-F17D7D08B565@stratosec.co%3E
- http://osvdb.org/89070
- http://osvdb.org/89146
- http://osvdb.org/89147
- http://seclists.org/fulldisclosure/2013/Jan/65
- http://secunia.com/advisories/51366
- http://secunia.com/advisories/51821
- http://secunia.com/advisories/51827
- http://support.citrix.com/article/CTX136163
- http://www.securityfocus.com/bid/57225
- http://www.securityfocus.com/bid/57259
- http://www.securitytracker.com/id?1027978
- http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-users/201301.mbox/%3C1BD2169F-BBFE-4E27-B50F-F17D7D08B565%40stratosec.co%3E
Frequently Asked Questions
What is the severity of CVE-2012-5616?
CVE-2012-5616 is classified as a medium severity vulnerability due to the exposure of sensitive information.
How do I fix CVE-2012-5616?
To fix CVE-2012-5616, update Apache CloudStack to version 4.0.1 or later and Citrix CloudPlatform to version 3.0.6 or later.
What systems are affected by CVE-2012-5616?
CVE-2012-5616 affects Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform versions prior to 3.0.6.
What type of information is exposed in CVE-2012-5616?
CVE-2012-5616 exposes sensitive information such as SSH private keys and host passwords stored in the log4j.conf file.
Who can exploit CVE-2012-5616?
Local users with access to the log4j.conf file can exploit CVE-2012-5616 to obtain sensitive information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/apache
- canonical/apache cloudstack
- version/apache cloudstack/4.0.0-incubating
- vendor/citrix
- canonical/citrix cloudplatform
- version/citrix cloudplatform/3.0.5