CloudStack Cluster Service Vulnerable to Command Injection Attacks
CVE-2024-38346

9.8CRITICAL

Key Information:

Vendor
Apache
Status
Apache Cloudstack
Vendor
CVE Published:
5 July 2024

Badges

📰 News Worthy

Summary

The Apache CloudStack management server is affected by a significant security vulnerability that allows attackers to exploit an unauthenticated port (default 9090) to execute arbitrary commands. This vulnerability stems from command injection issues within the CloudStack cluster service, which can lead to remote code execution on compromised hypervisors and management hosts, potentially impacting the overall security and operation of the CloudStack managed infrastructure. To mitigate risks, it is essential to restrict access to the cluster service port and apply the recommended software updates to versions 4.18.2.1 or 4.19.0.2 or later.

Affected Version(s)

Apache CloudStack 4.0.0 <= 4.18.2.0

Apache CloudStack 4.19.0.0 <= 4.19.0.1

News Articles

favicon imageCN-SEC

Apache CloudStack 的重要安全公告：CVE-2024-38346 和 CVE-2024-39864

Apache 软件基金会发布了紧急安全公告，披露了两个严重漏洞（CVE-2024-38346和CVE-2024-39864），这些漏洞影响了广泛使用的开源云计算平台 Apache CloudStack。这些漏洞对使用 CloudStack 管理虚拟化基础设施的组织构成了重大风险。

7 months ago

favicon imageShapeBlue

ShapeBlue Security Advisory: Apache CloudStack Security Releases 4.18.2.1 and 4.19.0.2

Apache CloudStack security releases 4.18.2.1 and 4.19.0.2 address the CVEs listed below. Users are recommended to upgrade their CloudStack installations.

7 months ago

References

https://lists.apache.org/thread/6l51r00csrct61plkyd3qg3fj...
vendor-advisorymailing-list
https://cloudstack.apache.org/blog/security-release-advis...
vendor-advisorypatch
https://www.shapeblue.com/shapeblue-security-advisory-apa...
third-party-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by ShapeBlue

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adam Pond of Apple Services Engineering Security
Terry Thibault of Apple Services Engineering Security
Damon Smith of Apple Services Engineering Security
.