Skip to main content

Cloudstack CVE-2024-29008

MEDIUM
Improper Input Validation (CWE-20)
2024-04-04 security@apache.org
Information Disclosure Cloudstack
6.4
CVSS 3.1 · Vendor: apache
Share

Severity by source

Vendor (apache) PRIMARY
6.4 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

Primary rating from Vendor (apache) · only source for this CVE.

CVSS VectorVendor: apache

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
None
Availability
Low

Lifecycle Timeline

1
CVE Published
Apr 04, 2024 - 08:15 cve.org
MEDIUM 6.4

DescriptionCVE.org

A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage.

Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

AnalysisAI

A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not explicitly enabled by the administrator. In a KVM based CloudStack environment, an attacker can exploit this issue to attach host devices such as storage disks, and PCI and USB devices such as network adapters and GPUs, in a regular VM instance that can be further exploited to gain access to the underlying network and storage infrastructure resources, and access any VM instance disks on the local storage. Users are advised to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue. Affected products include: Apache Cloudstack. Version information: version 4.18.1.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cloudstack

View all
CVE-2024-41107 HIGH POC
8.1 Jul 19

The CloudStack SAML authentication (disabled by default) does not enforce signature check. Rated high severity (CVSS 8.1
CVE-2022-26779 HIGH POC
7.5 Mar 15

Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. Rated high sev
CVE-2012-4501 CRITICAL
10.0 Oct 26

Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by l
CVE-2015-3252 CRITICAL
9.8 Feb 08

Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allow
CVE-2024-50386 CRITICAL
9.9 Nov 12

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary
CVE-2024-39864 CRITICAL
9.8 Jul 05

The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configur
CVE-2024-38346 CRITICAL
9.8 Jul 05

The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands
CVE-2024-29006 CRITICAL
9.8 Apr 04

By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an A
CVE-2022-35741 CRITICAL
9.8 Jul 18

Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vul
CVE-2025-47849 HIGH
8.8 Jun 10

A privilege escalation vulnerability in Apache CloudStack (CVSS 8.8) that allows the attacker. High severity vulnerabili
CVE-2025-47713 HIGH
8.8 Jun 10

A privilege escalation vulnerability in Apache CloudStack (CVSS 8.8) that allows the attacker. High severity vulnerabili
CVE-2024-45693 HIGH
8.8 Oct 16

Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-29008 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy