4 matches found
Code injection
Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call...
CVE-2014-9593
Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call...
PT-2015-4297
Name of the Vulnerable Software and Affected Versions Apache CloudStack versions prior to 4.3.2 Apache CloudStack versions 4.4.x prior to 4.4.2 Description The issue allows remote attackers to obtain private keys. This can be achieved via a "listSslCerts API" call, which is used to list SSL...
CVE-2014-9593: Exposure of Sensitive Information to an Unauthorized Actor
Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call...