PT-2024-22665 · Unknown · Cloudstack

Yuyang Xiao · Published 2024-04-04 · Updated 2024-04-05 · CVE-2024-29006

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CloudStack versions prior to 4.18.1.1 CloudStack versions prior to 4.19.0.1

Description The CloudStack management server honors the x-forwarded-for HTTP header and logs it as the source IP of an API request by default. This could lead to authentication bypass and other operational problems if an attacker spoofs their IP address.

Recommendations For versions prior to 4.18.1.1, upgrade to CloudStack version 4.18.1.1. For versions prior to 4.19.0.1, upgrade to CloudStack version 4.19.0.1.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2024-29006

Affected Products

Cloudstack

References · 7

• https://osv.dev/vulnerability/CVE-2024-29006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29006 · Security Note
• https://lists.apache.org/thread/82f46pv7mvh95ybto5hn8wlo6g8jhjvp · Vendor Advisory
• https://twitter.com/pravin_karthik/status/1776184445780811835 · Twitter Post
• https://twitter.com/fletch_ai/status/1776444823417016506 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1776082398427627922 · Twitter Post
• https://t.me/cvenotify/75707 · Telegram Post