[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5pCWzfHXjXvAONJIlo6N4_v8MXZB--88Enr2xLwmfH4":3,"g5a-risk:CVE-2015-3156":161},{"success":4,"data":5,"meta":159},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":111,"weaknesses":112,"weaknessesCount":48,"isActivelyExploited":121,"cisaInfo":15,"otxData":15,"relatedBlogPosts":122,"seoMetadata":123,"configurations":148,"relatedVendorCves":157,"notableEvents":158},"CVE-2015-3156","What is CVE-2015-3156?","The _write_config function in trove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fmongodb\u002Fservice.py, reset_configuration function in trove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fpostgresql\u002Fservice\u002Fconfig.py, write_config function in trove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fredis\u002Fservice.py, _write_mycnf function in trove\u002Fguestagent\u002Fdatastore\u002Fmysql\u002Fservice.py, InnoBackupEx::_run_prepare function in trove\u002Fguestagent\u002Fstrategies\u002Frestore\u002Fmysql_impl.py, InnoBackupEx::cmd function in trove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fmysql_impl.py, MySQLDump::cmd in trove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fmysql_impl.py, InnoBackupExIncremental::cmd function in trove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fmysql_impl.py, _get_actual_db_status function in trove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fcassandra\u002Fsystem.py and trove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fcassandra\u002Fservice.py, and multiple class CbBackup methods in trove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fexperimental\u002Fcouchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","The _write_config function in trove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fmongodb\u002Fservice.py, reset_configuration function in trove\u002Fguestagent\u002Fdatastore\u002Fexperime...","2017-08-11T21:29:00.26","2025-04-20T01:37:25.86",5.5,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",1.8,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":23,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":35,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00463,[39,39,39,39,39,39,39],"Medium",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"openstack","trove","*","cpe:2.3:a:openstack:trove:*:*:*:*:*:*:*:*",1,[50,57,61,65,68,71,74,77,80,83,86,89,91,93,95,97,99,101,103,105,107,109],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fbugs.launchpad.net\u002Ftrove\u002F+bug\u002F1398195","Launchpad",[54,55,56],"Issue Tracking","Third Party Advisory","VDB Entry",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1216073","Red Hat",[54,55,56],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fcassandra\u002Fservice.py#L230","GitHub",[55],{"url":66,"source":63,"tags":67},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fmongodb\u002Fservice.py#L176",[55],{"url":69,"source":63,"tags":70},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fdatastore\u002Fexperimental\u002Fredis\u002Fservice.py#L236",[55],{"url":72,"source":63,"tags":73},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fdatastore\u002Fmysql\u002Fservice.py#L790",[55],{"url":75,"source":63,"tags":76},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fexperimental\u002Fcouchbase_impl.py#L30",[55],{"url":78,"source":63,"tags":79},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fmysql_impl.py#L110",[55],{"url":81,"source":63,"tags":82},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fmysql_impl.py#L36",[55],{"url":84,"source":63,"tags":85},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fstrategies\u002Fbackup\u002Fmysql_impl.py#L55",[55],{"url":87,"source":63,"tags":88},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Ftrove\u002Fblob\u002Fmaster\u002Ftrove\u002Fguestagent\u002Fstrategies\u002Frestore\u002Fmysql_impl.py#L194",[55],{"url":51,"source":52,"tags":90},[54,55,56],{"url":58,"source":59,"tags":92},[54,55,56],{"url":62,"source":63,"tags":94},[55],{"url":66,"source":63,"tags":96},[55],{"url":69,"source":63,"tags":98},[55],{"url":72,"source":63,"tags":100},[55],{"url":75,"source":63,"tags":102},[55],{"url":78,"source":63,"tags":104},[55],{"url":81,"source":63,"tags":106},[55],{"url":84,"source":63,"tags":108},[55],{"url":87,"source":63,"tags":110},[55],22,[113],{"id":114,"name":115,"description":116,"extendedDescription":117,"status":118,"abstraction":119,"structure":120},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",false,[],{"title":124,"metaDescription":125,"keywords":126,"canonicalUrl":127,"structuredData":128},"What is CVE-2015-3156? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-3156, a medium severity cyber security vulnerability from 2017. The _write_config function in trove\u002Fguestagent\u002Fdatastore\u002Fe...","CVE-2015-3156, CVE-2015-3156 vulnerability, CVE-2015-3156 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, openstack security, trove vulnerability","\u002Fwhat-is\u002Fcve-2015-3156",{"@context":129,"@type":130,"headline":124,"description":125,"datePublished":10,"dateModified":11,"author":131,"publisher":135,"about":139,"mainEntityOfPage":143,"articleSection":146,"keywords":147},"https:\u002F\u002Fschema.org","TechArticle",{"@type":132,"name":133,"url":134},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":132,"name":133,"url":134,"logo":136},{"@type":137,"url":138},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":140,"name":6,"description":141,"additionalType":142},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":144,"@id":145},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-3156","Cybersecurity","CVE-2015-3156, CVE-2015-3156 vulnerability, CVE-2015-3156 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[149],{"Operator":15,"Negate":15,"Nodes":150},[151],{"Operator":152,"Negate":15,"CPEMatch":153},"OR",[154],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":155,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":156},"C58A67C0-6187-457B-B115-F785CE64C4E5","2014.2.4",[],[],{"lastModified":11,"cacheTime":160,"version":33},1792344605789,{"score":162,"band":163,"action":164,"scoredAt":165},18,"Info","Track","2026-10-17T09:11:09.804972+00:00"]