CVE-2015-5201

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan Missing Authentication for Critical Function pada redhat enterprise virtualization, redhat enterprise virtualization hypervisor. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.

Rincian

Terbit di NVD

25 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/cve-2015-5201 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1253882 issue tracking · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1273144 issue tracking · advisory vendor
• https://rhn.redhat.com/errata/RHEA-2015-2527.html advisory vendor