Medium severity4.9NVD Advisory· Published Feb 8, 2016· Updated May 6, 2026

CVE-2015-3251

Description

Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to API calls.

Affected products

Apache/Cloudstack2 versions
cpe:2.3:a:apache:cloudstack:4.4.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:cloudstack:4.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:4.5.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

mail-archives.apache.org/mod_mbox/cloudstack-users/201602.mbox/%3C94DD4CB4-F718-4F79-A934-3D677E497114%40gmail.com%3EnvdVendor Advisory
blogs.apache.org/cloudstack/entry/two_late_announced_security_advisoriesnvdVendor Advisory
www.securityfocus.com/archive/1/537458/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000