VULNERABILITY INTELLIGENCE
CVE-2015-5293
CVSS score5.9 MEDIUM
EPSS probability1.88%
CISA KEVNot currently listed
Published2017-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- secalert@redhat.com — Vendor Advisory
- secalert@redhat.com — Issue Tracking, VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, VDB Entry, Vendor Advisory