PT-2025-25168 · Apache · Apache Cloudstack

Bernardo De Marco Gonã§Alves · Published 2025-06-10 · Updated 2025-06-11 · CVE-2025-30675

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions prior to 4.19.3.0 Apache CloudStack versions prior to 4.20.1.0

Description A flaw in access control affects the "listTemplates" and "listIsos" APIs. A malicious Domain Admin or Resource Admin can exploit this issue by specifying the domainid parameter along with the filter=self or filter=selfexecutable values, allowing the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain. This can lead to the enumeration and extraction of metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.

Recommendations For Apache CloudStack versions prior to 4.19.3.0, upgrade to Apache CloudStack 4.19.3.0. For Apache CloudStack versions prior to 4.20.1.0, upgrade to Apache CloudStack 4.20.1.0. As a temporary workaround, consider restricting access to the "listTemplates" and "listIsos" APIs to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-08203

CVE-2025-30675

Affected Products

Apache Cloudstack

References · 8

• https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30675 · Security Note
• https://lists.apache.org/thread/y3qnwn59t8qggtdohv7k7vw39bgb3d60 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08203 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30675 · Vendor Advisory
• https://t.me/cvetracker/25985 · Telegram Post
• https://shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0 · Note
• https://twitter.com/CVEnew/status/1932581586265911298 · Twitter Post