CVE

Id
58859  
CVE No.
CVE-2012-5616  
Status
Candidate  
Description
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1) the SSH private key as recorded by the createSSHKeyPair API, (2) the password of an added host as recorded by the AddHost API, or the password of an added VM as recorded by the (3) DeployVM or (4) ResetPasswordForVM API.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602025 58859 CVE-2012-5616 FULLDISC:20130110 CVE-2012-5616: Apache CloudStack information disclosure vulnerability  View
602026 58859 CVE-2012-5616 URL:http://seclists.org/fulldisclosure/2013/Jan/65  View
602027 58859 CVE-2012-5616 MLIST:[incubator-cloudstack-users] 20130110 CVE-2012-5616: Apache CloudStack information disclosure vulnerability  View
602028 58859 CVE-2012-5616 URL:http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-users/201301.mbox/%3C1BD2169F-BBFE-4E27-B50F-F17D7D08B565@stratosec.co%3E  View
602029 58859 CVE-2012-5616 CONFIRM:http://support.citrix.com/article/CTX136163  View
602030 58859 CVE-2012-5616 BID:57225  View
602031 58859 CVE-2012-5616 URL:http://www.securityfocus.com/bid/57225  View
602032 58859 CVE-2012-5616 BID:57259  View
602033 58859 CVE-2012-5616 URL:http://www.securityfocus.com/bid/57259  View
602034 58859 CVE-2012-5616 OSVDB:89070  View
602035 58859 CVE-2012-5616 URL:http://osvdb.org/89070  View
602036 58859 CVE-2012-5616 OSVDB:89146  View
602037 58859 CVE-2012-5616 URL:http://osvdb.org/89146  View
602038 58859 CVE-2012-5616 OSVDB:89147  View
602039 58859 CVE-2012-5616 URL:http://osvdb.org/89147  View
602040 58859 CVE-2012-5616 SECTRACK:1027978  View
602041 58859 CVE-2012-5616 URL:http://www.securitytracker.com/id?1027978  View
602042 58859 CVE-2012-5616 SECUNIA:51366  View
602043 58859 CVE-2012-5616 URL:http://secunia.com/advisories/51366  View
602044 58859 CVE-2012-5616 SECUNIA:51821  View
602045 58859 CVE-2012-5616 URL:http://secunia.com/advisories/51821  View
602046 58859 CVE-2012-5616 SECUNIA:51827  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30573 JVNDB-2012-006281 ekiga の lib/engine/components/opal/opal-call.cpp におけるサービス運用妨害 (DoS) の脆弱性 ekiga の lib/engine/components/opal/opal-call.cpp には、サービス運用妨害 (クラッシュ) 状態にされる脆弱性が存在します。 CVE-2012-5621 58859 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006281.html  View