NetSight
IP …
medium6.5

CVE-2016-3085

Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and use…

Impact

Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers to bypass authentication and access the user interface via vectors related to the SAML plugin.

Affected products

VendorProductAffected versions
ApacheCloudstack
Versions 4.7.0, 4.5.1, 4.5.2, 4.6.0, 4.6.1, 4.6.2

Weakness classification

CWE-254CWE-287

References