Tracker / CVE-2014-0031
CVE-2014-0031
Medium 4.0
The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.
Affected products and versions
| apache | cloudstack |
|---|---|
| apache | cloudstack · … → 4.2.0 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.