Description
Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence, which makes it easier for remote attackers to guess the console access URL via a brute force attack.
References
- 92749 vdb-entry
- http://support.citrix.com/article/CTX135815
- [cloudstack-dev] 20130424 Apache CloudStack Security Advisory: Multiple vulnerabilities in Apache CloudStack mailing-list
- 1028473 vdb-entry
- cloudstack-cve20132758-info-disc(83782) vdb-entry
- 53204 third-party-advisory
- 59464 vdb-entry
- 53175 third-party-advisory