VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/cve-2015-5201 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1253882 | Issue Tracking Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1273144 | Issue Tracking Vendor Advisory |
| https://rhn.redhat.com/errata/RHEA-2015-2527.html | Vendor Advisory |
| https://access.redhat.com/security/cve/cve-2015-5201 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1253882 | Issue Tracking Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1273144 | Issue Tracking Vendor Advisory |
| https://rhn.redhat.com/errata/RHEA-2015-2527.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/cve-2015-5201 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1253882 - Issue Tracking, Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1273144 - Issue Tracking, Vendor Advisory | |
| References | () https://rhn.redhat.com/errata/RHEA-2015-2527.html - Vendor Advisory |
Information
Published : 2020-02-25 21:15
Updated : 2024-11-21 02:32
NVD link : CVE-2015-5201
Mitre link : CVE-2015-5201
CVE.ORG link : CVE-2015-5201
JSON object : View
Products Affected
redhat
- enterprise_virtualization_hypervisor
- enterprise_virtualization
CWE
CWE-306
Missing Authentication for Critical Function