CVE-2023-46326 | BDVDB-2026-218042 Detail

Description#

ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these. This leads to privilege escalation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/zstackio/zstack/security/advisories/GHSA-w2rv-x3pp-h67q

Exploit#

No public exploit known

History#

Version 12023-11-30Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.