CVE-2023-46326

ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these. This leads to privilege escalation...

PT-2023-29961

Name of the Vulnerable Software and Affected Versions ZStack Cloud versions 3.10.38 and before Description The issue allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these, leading to privilege escalation. Recommendations For ZStack Cloud versions...

CVE-2023-46326: Insufficient Session Expiration

ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these. This leads to privilege escalation...