Unscored CVE-2015-3251 EUVD-2015-3305GHSA-mm84-f7fc-q3fw

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts o…

Published Feb 8, 2016 · Updated Aug 6, 2024 · Assigned by redhat

Description

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.

References

https://blogs.apache.org/cloudstack/entry/two_late_announced_security_advisories
20160205 CVE-2015-3251: Apache CloudStack VM Credential Exposure mailing-list
[cloudstack-users] 20160205 CVE-2015-3251: Apache CloudStack VM Credential Exposure mailing-list