CVE-2015-3252

published 2016-02-08

CVE-2015-3252: Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	cloudstack	<= 4.5.1	—

CWE-255