CVE-2016-3085: Medium severity apache cloudstack vulnerability

Published Jun 10, 2016

Updated

Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers to bypass authentication and access the user interface via vectors related to the SAML plugin.

Affected Software

7 affected components

Apache CloudStack=4.7.0

Apache CloudStack=4.5.1

Apache CloudStack=4.5.2

Apache CloudStack=4.6.0

Apache CloudStack=4.6.1

Apache CloudStack=4.6.2

Apache CloudStack=4.8

Event History

Jun 10, 2016

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3085?

CVE-2016-3085 has a high severity rating as it allows remote attackers to bypass SAML-based authentication.

How do I fix CVE-2016-3085?

To fix CVE-2016-3085, upgrade Apache CloudStack to the latest version that includes the patches, specifically versions 4.5.2.1, 4.6.2.1, 4.7.1.1, or 4.8.0.1.

Which versions of Apache CloudStack are affected by CVE-2016-3085?

CVE-2016-3085 affects Apache CloudStack versions 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1.

What types of attacks can exploit CVE-2016-3085?

CVE-2016-3085 can be exploited by remote attackers to bypass authentication and gain unauthorized access to the user interface.

Is SAML-based authentication safe in Apache CloudStack after CVE-2016-3085?

SAML-based authentication in Apache CloudStack is vulnerable before the patches are applied, so it is important to update to the fixed versions.