CVE-2013-6398: Low severity Apache CloudStack vulnerability
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache CloudStack virtual routerto a version that resolves this vulnerability.Fixed in 4.2.1 - Compensating control
If you cannot upgrade, apply compensating network/firewall controls to ensure remote access is restricted as intended, since source restrictions in firewall rules may not be preserved after restarting the virtual router.
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6398?
The severity of CVE-2013-6398 is considered medium as it allows attackers to bypass firewall restrictions.
How do I fix CVE-2013-6398?
To fix CVE-2013-6398, upgrade to Apache CloudStack version 4.2.1 or later.
Which versions of Apache CloudStack are affected by CVE-2013-6398?
CVE-2013-6398 affects Apache CloudStack versions before 4.2.1, including versions 2.0, 2.1.x, 2.2.x, 3.0.x, and 4.0.x.
What specific issue does CVE-2013-6398 address?
CVE-2013-6398 addresses the problem of the virtual router not preserving source restrictions in firewall rules after a restart.
Can CVE-2013-6398 lead to unauthorized access?
Yes, CVE-2013-6398 can potentially lead to unauthorized access due to firewall restrictions being bypassed.