Apache CloudStack Virtual Router Component Security Bypass Vulnerability
BID:64782
Info
Apache CloudStack Virtual Router Component Security Bypass Vulnerability
| Bugtraq ID: | 64782 |
| Class: | Unknown |
| CVE: |
CVE-2013-6398 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 27 2013 12:00AM |
| Updated: | Nov 27 2013 12:00AM |
| Credit: | Cloud team at Schuberg Philis |
| Vulnerable: |
Apache CloudStack 4.2 Apache CloudStack 4.1.1 Apache CloudStack 4.1.0 |
| Not Vulnerable: |
Apache CloudStack 4.3 Apache CloudStack 4.2.1 |
Exploit / POC
Apache CloudStack Virtual Router Component Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apache CloudStack Virtual Router Component Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Apache CloudStack Virtual Router Component Security Bypass Vulnerability
References:
References:
- Apache CloudStack Homepage (Apache Software Foundation)
- Updated [CVE-2013-6398] CloudStack Virtual Router stop/start modifies firewall r (SecLists.Org)
- Virtual router stop/start modifies firewall rules allowing additional access (Apache Software Foundation)