CVE-2014-0031

Severity CVSS v4.0:
Pending analysis
Type:
CWE-264 Permissions, Privileges, and Access Control
Publication date:
15/01/2014
Last modified:
11/04/2025

Description

The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:* 4.2.0 (including)
cpe:2.3:a:apache:cloudstack:2.0:-:community:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.1.10:*:*:*:*:*:*:*
cpe:2.3:a:apache:cloudstack:2.2.0:*:*:*:*:*:*:*