CVE-2015-5201: redhat enterprise_virtualization
Vulnerability summary
CVE-2015-5201 is a high (CVSS 7.5) vulnerability in redhat enterprise_virtualization. EPSS estimates a 1.46% chance of exploitation in the next 30 days, higher than 73.1% of scored vulnerabilities.
Timeline
- 25-02-2020PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.46%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.46% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat5 products
- enterprise_virtualization< 3.5.6
- enterprise_virtualization_hypervisor≥ 6-6.0, < 6-6.7-20151117.0 | ≥ 7-7.0, < 7-7.2-20151119.0
- enterprise virtualization hypervisor (aka rhev-h)7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0
- rhev-hypervisor6< 0:6.7-20151123.0.el6ev
- rhev-hypervisor7< 0:7.2-20151129.1.el6ev | < 0:7.2-20151129.1.el7ev
1 vendor · 5 products
