Code injection

Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs...

CVE-2012-4501

Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs...

CVE-2012-4501: Undefined Security Weakness

Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs...

PT-2012-5447

Name of the Vulnerable Software and Affected Versions Citrix Cloud.com CloudStack, and Apache CloudStack pre-release Description The issue allows remote attackers to make arbitrary API calls by leveraging the system user account. This can be demonstrated by API calls to delete VMs. Recommendation...

CVE-2012-3241: Undefined Security Weakness

The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands...

PT-2012-4593

Name of the Vulnerable Software and Affected Versions Eucalyptus versions 2.0.3 and 3.0.x before 3.0.2 Description The issue is related to improper authentication of SOAP requests in the VMware Broker. This allows remote attackers to execute arbitrary VMware Broker API commands. Recommendations F...