CVE-2013-4317

In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see…

published February 6, 2018

CVSS
—
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their own.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01173 · 67.2th percentile
Published
2018-02-06T14:00Z
EPSS history
Timeline
  • 06 FEB 14:00Z
    In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see…
    cvelistv5