medium4.0
CVE-2014-0031
The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users…
Impact
The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Cloudstack | through 4.2.0 Versions 2.0, 2.0.1, 2.1.0, 2.1.1, 2.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/55960
- https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl
- https://issues.apache.org/jira/browse/CLOUDSTACK-5145
- http://secunia.com/advisories/55960
- https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl
- https://issues.apache.org/jira/browse/CLOUDSTACK-5145