Description
Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging knowledge of the source code.
References
- cloudstack-cve20132756-sec-bypass(83781) vdb-entry
- http://support.citrix.com/article/CTX135815
- [cloudstack-dev] 20130424 Apache CloudStack Security Advisory: Multiple vulnerabilities in Apache CloudStack mailing-list
- 92748 vdb-entry
- 59463 vdb-entry
- 1028473 vdb-entry
- 53204 third-party-advisory
- 53175 third-party-advisory