CVE-2015-3252 in CloudStack

Summary

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 04/10/2015
• Disclosure: 02/08/2016
• Moderation: VulDB entry created
• Entries: VDB-80823 (1)
• CPE: ready
• CWE: CWE-255 (Confirmed)
• CVSS: 8.0
• EPSS: 0.01867
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-3252
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3252
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-3252/