CVE-2015-3251 - Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls

Back Back to CVE browser

MEDIUM

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls

Published Feb 8, 2016

4.9

MEDIUM

CVSS 3.0

EPSS 2.45%

Description

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E
mailing-listx_refsource_MLISTVendor Advisory
http://www.securityfocus.com/archive/1/537458/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E		mailing-listx_refsource_MLISTVendor Advisory
http://www.securityfocus.com/archive/1/537458/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories		x_refsource_CONFIRMVendor Advisory