CVE-2014-0031
published 2014-01-15CVE-2014-0031: The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users…
medium4CVSS 3.1
AVNACLAuSCPINAN
The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | cloudstack | <= 4.2.0 | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |
| apache | cloudstack | — | — |