CVE-2012-5616
- State
- Published
- Severity
- Not scored
- Published
- Jan 22, 2013
- Updated
- Aug 6, 2024
- Reserved
- Oct 24, 2012
Description
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain (1) the SSH private key as recorded by the createSSHKeyPair API, (2) the password of an added host as recorded by the AddHost API, or the password of an added VM as recorded by the (3) DeployVM or (4) ResetPasswordForVM API.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://support.citrix.com/article/CTX136163
- 89146vdb-entry
- 20130110 CVE-2012-5616: Apache CloudStack information disclosure vulnerabilitymailing-list
- 89147vdb-entry
- 57225vdb-entry
- [incubator-cloudstack-users] 20130110 CVE-2012-5616: Apache CloudStack information disclosure vulnerabilitymailing-list
- 51821third-party-advisory
- 57259vdb-entry
- 89070vdb-entry
- 51366third-party-advisory
- 51827third-party-advisory
- 1027978vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.