Cloudstack
CVE-2013-6398
LOW
Severity by source
AV:N/AC:M/Au:M/C:P/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
AV:N/AC:M/Au:M/C:P/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
AnalysisAI
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions. Rated low severity (CVSS 2.8), this vulnerability is remotely exploitable. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-264. The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request. Affected products include: Apache Cloudstack. Version information: before 4.2.1.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Cloudstack
View allThe CloudStack SAML authentication (disabled by default) does not enforce signature check. Rated high severity (CVSS 8.1
Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. Rated high sev
Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by l
Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allow
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary
The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configur
The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands
By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an A
Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vul
A privilege escalation vulnerability in Apache CloudStack (CVSS 8.8) that allows the attacker. High severity vulnerabili
A privilege escalation vulnerability in Apache CloudStack (CVSS 8.8) that allows the attacker. High severity vulnerabili
Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today