Vulnerability Details CVE-2015-3251
Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.2%
CVSS Severity
CVSS v3 Score 4.9
CVSS v2 Score 4.0
References
- http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E
- http://www.securityfocus.com/archive/1/537458/100/0/threaded
- https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories
- http://mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3E
- http://www.securityfocus.com/archive/1/537458/100/0/threaded
- https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories
Products affected by CVE-2015-3251
-
cpe:2.3:a:apache:cloudstack:4.4.4
-
cpe:2.3:a:apache:cloudstack:4.5.1