CloudStack Management Server Vulnerability: Authentication Bypass via X-Forwarded-For Header

CVE-2024-29006

What is CVE-2024-29006?

The Apache CloudStack management server's default configuration allows it to process the x-forwarded-for HTTP header, using it to log the source IP of API requests. This can result in potential exploitation by attackers who can spoof their IP addresses, leading to authentication bypass and various operational issues. Users are strongly advised to upgrade to CloudStack versions 4.18.1.1 or 4.19.0.1 to mitigate this vulnerability and enhance their security posture.

References