CVE-2015-5201 - CVE House
Back to Database
Status published High CVE-2015-5201

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka...

Vulnerability Description

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-5201

Credits & Attribution

No credits recorded in the NVD database.

References

More from RedHat

View All →
CVE-2019-3834
It was found that the fix for CVE-2014-0114 had been...
Medium 5.6
CVE-2019-19341
A flaw was found in Ansible Tower, versions 3.6.x before...
Medium 5.9
CVE-2019-10212
A flaw was found in, all under 2.0.20, in the...
Medium 4.8
CVE-2019-10202
A series of deserialization vulnerabilities have been discovered in Codehaus...
High 8.1
CVE-2019-10176
A flaw was found in OpenShift Container Platform, versions 3.11...
Medium 4.2

Affected Vendor

Affected Software

Enterprise Virtualization Hypervisor (aka RHEV-H)
Vulnerable Versions:
7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0

Timeline

Official Publish: February 25th, 2020
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.