CVE-2015-3251: Infoleak
Published Feb 8, 2016
·Updated
Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.
Affected Software
2 affected components
Apache CloudStack=4.4.4
Apache CloudStack=4.5.1
Event History
Feb 8, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3251?
CVE-2015-3251 is considered a high-severity vulnerability due to the exposure of sensitive password information.
2
How do I fix CVE-2015-3251?
To mitigate CVE-2015-3251, upgrade Apache CloudStack to version 4.5.2 or later.
3
Which versions of Apache CloudStack are affected by CVE-2015-3251?
CVE-2015-3251 affects Apache CloudStack versions 4.4.4 and 4.5.1.
4
What type of access is required for exploiting CVE-2015-3251?
Exploitation of CVE-2015-3251 requires remote authenticated administrator access.
5
What information can be compromised through CVE-2015-3251?
CVE-2015-3251 may allow access to sensitive password information for root accounts of virtual machines.