CVE-2015-3252: Critical severity apache cloudstack vulnerability
Published Feb 8, 2016
·Updated
Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.
Affected Software
1 affected component
Apache CloudStack<=4.5.1
Event History
Feb 8, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3252?
CVE-2015-3252 has been rated as a moderate severity vulnerability due to the potential unauthorized access it allows.
2
How do I fix CVE-2015-3252?
To mitigate CVE-2015-3252, upgrade Apache CloudStack to version 4.5.2 or later.
3
What type of attacks does CVE-2015-3252 allow?
CVE-2015-3252 allows remote attackers to connect to the VNC server and potentially gain unauthorized access to virtual machines.
4
Which versions of Apache CloudStack are affected by CVE-2015-3252?
CVE-2015-3252 affects Apache CloudStack versions prior to 4.5.2.
5
What component of Apache CloudStack does CVE-2015-3252 affect?
CVE-2015-3252 affects the migration of KVM virtual machines in Apache CloudStack.