Lucene search

CVE-2024-50386 Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure

🗓️ 12 Nov 2024 14:08:34Reported by apacheType

CVE-2024-50386 Apache CloudStack: Direct download abuse ris

Reporter	Title	Published	Views	Family All 3
NVD	CVE-2024-50386	12 Nov 202415:15	–	nvd
Cvelist	CVE-2024-50386 Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure	12 Nov 202414:34	–	cvelist
CVE	CVE-2024-50386	12 Nov 202415:15	–	cve

[
  {
    "cpes": [
      "cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apache",
    "product": "cloudstack",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "4.18.2.4"
      },
      {
        "status": "affected",
        "version": "4.19.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.1.2"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cloudstack	www.cloudstack.apache.org/blog/security-release-advisory-4.18.2.5-4.19.1.3
lists	www.lists.apache.org/thread/d0x83c2cyglzzdw8csbop7mj7h83z95y
shapeblue	www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-5-and-4-19-1-3/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Nov 2024 14:34Current

7.3High risk

Vulners AI Score7.3

CVSS38.5

EPSS0.000

SSVCNaN

CWE-20