| CVE-2024-50386 |
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary…
|
8.5
Élevée
|
12 nov. 2024 |
| CVE-2024-45693 |
Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to…
|
8.0
Élevée
|
16 oct. 2024 |
| CVE-2024-42062 |
CloudStack account-users by default use username and password based authentication for API and UI access
|
Non notée
|
7 août 2024 |
| CVE-2024-38346 |
The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands…
|
Non notée
|
5 juil. 2024 |
| CVE-2024-29008 |
A problem has been identified in the CloudStack additional VM configuration (extraconfig) feature which can be misused…
|
Non notée
|
4 avr. 2024 |
| CVE-2024-29007 |
The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or…
|
Non notée
|
4 avr. 2024 |