CVE-2025-66172

The CloudStack Backup plugin versions 4.21.0.0 and 4.22.0.0 contain an improper access logic vulnerability. This flaw allows any authenticated user with access to specific APIs to restore a volume from another user's backups and attach it to their own virtual machines in environments where the pl...

PT-2018-13785

Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.23 OpenAFS versions 1.8.x prior to 1.8.2 Description An issue in the backup tape controller process allows unauthenticated RPCs, resulting in operations being performed with administrator credentials. This include...