NVD

Id
46732  
Name
CVE-2012-5616  
Description
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1) the SSH private key as recorded by the createSSHKeyPair API, (2) the password of an added host as recorded by the AddHost API, or the password of an added VM as recorded by the (3) DeployVM or (4) ResetPasswordForVM API.  
Reject
 
CVSS Version
2  
CVSS Score
1.5  
Severity
Low  
CVSS Base Score
1.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2013-01-22  
Modified Date
2013-04-01  
Seq
2012-5616  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234085 46732 CVE-2012-5616 [incubator-cloudstack-users] 20130110 CVE-2012-5616: Apache CloudStack information disclosure vulnerability  View
234086 46732 CVE-2012-5616 20130110 CVE-2012-5616: Apache CloudStack information disclosure vulnerability  View
234087 46732 CVE-2012-5616 http://support.citrix.com/article/CTX136163  View
234088 46732 CVE-2012-5616 57259  View
234089 46732 CVE-2012-5616 1027978  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19660 JVNDB-2013-001235 Apache CloudStack および Citrix CloudPlatform における重要な情報を取得される脆弱性 Apache CloudStack および Citrix CloudPlatform は、重要な情報を log4j.conf ログファイルに保存するため、下記の重要な情報を取得される脆弱性が存在します。 CVE-2012-5616 58854 CVE-2012-5616 46732 1.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001235.html 2013-01-09 2013-01-24 View