CVE-2014-0031 | BDVDB-2026-59284 Detail

Description#

The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/55960
https://blogs.apache.org/cloudstack/entry/cve_2014_0031_cloudstack_listnetworkacl
https://issues.apache.org/jira/browse/CLOUDSTACK-5145

Exploit#

No public exploit known

History#

Version 12014-01-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.