medium5.0
CVE-2014-7807
Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which trig…
Impact
Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which triggers an unauthenticated bind.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Cloudstack | Versions 4.3.0, 4.3.1, 4.4.0, 4.4.1 |