CVE-2024-42222

概要

参考情報

• cloudstack.apache.org/blog/security-release-advisory-4.19.1.1-4.18.2.3 · Vendor Advisory
• apache/cloudstack · Exploit
• lists.apache.org/thread/lxqtfd6407prbw3801hb4fz3ot3t8wlj · Mailing List
• shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-3-and-4-19-1-1 · Third Party Advisory
• openwall.com/lists/oss-security/2024/08/06/6

cloudstack のその他の脆弱性

• CVE-2026-59654高 7.5Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality. It affe…
• CVE-2026-68745高 8.1Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent t…
• CVE-2026-66797中 5.4Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation …
• CVE-2026-66722高 7.2Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin…
• CVE-2026-66721低 2.7Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permissio…