Apache CloudStack Access Control Error Vulnerability

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack suffers from an Access Control Error vulnerability...

CVE-2024-45461: Missing Authorization

The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to acce...

PT-2024-31652 · Apache · Apache Cloudstack

Name of the Vulnerable Software and Affected Versions: Apache CloudStack versions 4.7.0 through 4.18.2.3 Apache CloudStack versions 4.19.0.0 through 4.19.1.1 Description: The CloudStack Quota feature, which is disabled by default, allows cloud administrators to implement a quota or usage limit...

CVE-2008-2571

Cross-site request forgery CSRF vulnerability in LimeSurvey formerly PHPSurveyor before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action...