Lucene search
+L

20 matches found

OSV
OSV
added 2025/11/27 11:40 a.m.11 views

CVE-2025-59454 Apache CloudStack: Lack of user permission validation leading to data leak for few APIs

In Apache CloudStack, a gap in access control checks affected the APIs - createNetworkACL - listNetworkACLs - listResourceDetails - listVirtualMachinesUsageHistory - listVolumesUsageHistory While these APIs were accessible only to authorized users, insufficient permission validation meant that...

4.3CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder