CVE-2015-5201

7.5 highEPSS 1.5%

High (7.5) in redhat. EPSS 1.5% chance of exploitation in the next 30 days.

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2020-02-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:enterprise_virtualization
redhat:enterprise_virtualization_hypervisor

References

https://access.redhat.com/security/cve/cve-2015-5201
https://bugzilla.redhat.com/show_bug.cgi?id=1253882
https://bugzilla.redhat.com/show_bug.cgi?id=1273144
https://rhn.redhat.com/errata/RHEA-2015-2527.html
https://access.redhat.com/security/cve/cve-2015-5201

Check your stack JSON