Red Hat Enterprise Virtualization Manager up to 3.6 SLAAC IPv6 Address access control

Summaryinfo

A vulnerability, which was classified as critical, has been found in Red Hat Enterprise Virtualization Manager up to 3.6. This affects an unknown part of the component SLAAC IPv6 Address Handler. The manipulation leads to access control. This vulnerability is documented as CVE-2015-5293. The attack can be initiated remotely. There is not any exploit available. It is suggested to update the configuration settings.

Detailsinfo

A vulnerability was found in Red Hat Enterprise Virtualization Manager up to 3.6 (Virtualization Software) and classified as critical. This issue affects an unknown functionality of the component SLAAC IPv6 Address Handler. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.

The bug was discovered 07/01/2017. The weakness was released 08/24/2017 (Website). The advisory is shared at access.redhat.com. The identification of this vulnerability is CVE-2015-5293 since 07/01/2015. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/10/2019). MITRE ATT&CK project uses the attack technique T1068 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 54 days. During that time the estimated underground price was around $5k-$25k.

It is possible to mitigate the problem by applying the configuration setting .

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Virtualization Software

Vendor

• Red Hat

Name

• Enterprise Virtualization Manager

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion