VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 8, 2016· Updated Jun 17, 2026

CVE-2015-3252

CVE-2015-3252

Description

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to the VNC server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/Cloudstack2 versions
    cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*range: <=4.5.1
    • (no CPE)range: <4.5.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.