CVEvulnerability
CVE-2015-5293
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-08-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-284
Description
Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.
Affected configurations
• redhat enterprise virtualization manager (<= 3.6.0)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://access.redhat.com/security/cve/CVE-2015-5293 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1267714 Issue Tracking, VDB Entry, Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2015-5293 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1267714 Issue Tracking, VDB Entry, Vendor Advisory