CVE-2014-7807: Medium severity apache cloudstack vulnerability
Published Dec 10, 2014
·Updated
Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which triggers an unauthenticated bind.
Affected Software
4 affected components
Apache CloudStack=4.3.0
Apache CloudStack=4.3.1
Apache CloudStack=4.4.0
Apache CloudStack=4.4.1
Event History
Dec 10, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7807?
CVE-2014-7807 is classified as a high severity vulnerability due to its ability to allow unauthenticated access.
2
How do I fix CVE-2014-7807?
To fix CVE-2014-7807, upgrade Apache CloudStack to versions 4.3.2 or 4.4.2 or later.
3
What versions of Apache CloudStack are affected by CVE-2014-7807?
Versions 4.3.0, 4.3.1, 4.4.0, and 4.4.1 of Apache CloudStack are affected by CVE-2014-7807.
4
Can CVE-2014-7807 be exploited remotely?
Yes, CVE-2014-7807 can be exploited remotely by attackers who send a login request without a password.
5
What is the impact of CVE-2014-7807 on my CloudStack installation?
The impact of CVE-2014-7807 on your CloudStack installation is significant as it allows potential attackers to bypass authentication measures.