CVE-2015-3252

Critical

Published: 08/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Apache CloudStack before version 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, allowing remote attackers to gain access by connecting to the VNC server.

Risk Assessment

Attackers may gain unauthorized access to virtual machines, potentially leading to data leakage or system takeover.

Recommendation

It is recommended to upgrade Apache CloudStack to version 4.5.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.