Authentication Bypass Vulnerability in Apache CloudStack by Citrix
CVE-2014-7807

Currently unrated

Key Information:

Vendor

Apache
Status
Cloudstack
Vendor
CVE Published:
10 December 2014

What is CVE-2014-7807?

Apache CloudStack versions prior to 4.3.2 and 4.4.2 present a vulnerability that allows attackers to bypass authentication controls via a login request that does not require a password. This exploitation results in an unauthenticated bind, potentially granting attackers unauthorized access to sensitive information or resources within the network.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://support.citrix.com/article/CTX200285
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/534176/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.