CVE-2014-7807

Currently unrated

Key Information:

Vendor: Apache
Status: Cloudstack
Vendor: CVE Published:; 10 December 2014

Summary

Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which triggers an unauthenticated bind.

References

http://support.citrix.com/article/CTX200285

x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/534176/100/0/threaded

mailing-listx_refsource_BUGTRAQ

Timeline

Vulnerability published
Dec 10, 2014
Vulnerability Reserved
Oct 3, 2014