CVEvulnerability
CVE-2012-4501
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-10-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs.
Affected configurations
• apache cloudstack
• citrix cloudstack
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2012-10/0062.html archives.neohapsis.com
- http://cloudstack.org/blog/185-cloudstack-configuration-vulnerability-discovered.html Vendor Advisory
- http://markmail.org/thread/yfuxgymdqwg3kcg4 markmail.org
- http://archives.neohapsis.com/archives/bugtraq/2012-10/0062.html archives.neohapsis.com
- http://cloudstack.org/blog/185-cloudstack-configuration-vulnerability-discovered.html Vendor Advisory
- http://markmail.org/thread/yfuxgymdqwg3kcg4 markmail.org