CVEvulnerability
CVE-2014-0031
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.
Affected configurations
• apache cloudstack (<= 4.2.0)
• apache cloudstack 2.0
• apache cloudstack 2.0.1
• apache cloudstack 2.1.0
• apache cloudstack 2.1.1
• apache cloudstack 2.1.2
• apache cloudstack 2.1.3
• apache cloudstack 2.1.4
• apache cloudstack 2.1.5
• apache cloudstack 2.1.6
• apache cloudstack 2.1.7
• apache cloudstack 2.1.8
• apache cloudstack 2.1.9
• apache cloudstack 2.1.10
• apache cloudstack 2.2.0
• apache cloudstack 2.2.1
• apache cloudstack 2.2.2
• apache cloudstack 2.2.3
• apache cloudstack 2.2.5
• apache cloudstack 2.2.6
• apache cloudstack 2.2.7
• apache cloudstack 2.2.8
• apache cloudstack 2.2.9
• apache cloudstack 2.2.11
• apache cloudstack 2.2.12
• apache cloudstack 2.2.13
• apache cloudstack 2.2.14
• apache cloudstack 3.0.0
• apache cloudstack 3.0.1
• apache cloudstack 3.0.2
• apache cloudstack 4.0.0
• apache cloudstack 4.0.1
• apache cloudstack 4.0.2
• apache cloudstack 4.1.0
• apache cloudstack 4.1.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/55960 Vendor Advisory
- https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl Vendor Advisory
- https://issues.apache.org/jira/browse/CLOUDSTACK-5145 issues.apache.org
- http://secunia.com/advisories/55960 Vendor Advisory
- https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl Vendor Advisory
- https://issues.apache.org/jira/browse/CLOUDSTACK-5145 issues.apache.org