PT-2025-25170 · Apache · Apache Cloudstack

Scott Schmitz · Published 2025-06-10 · Updated 2025-06-11 · CVE-2025-47713

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.10.0.0 through 4.20.0.0

Description A privilege escalation issue exists where a malicious Domain Admin user in the ROOT domain can reset the password of user-accounts of Admin role type, allowing the attacker to assume control over higher-privileged user-accounts. This could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of infrastructure managed by CloudStack.

Recommendations For Apache CloudStack versions 4.10.0.0 through 4.20.0.0, upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0, which includes fixes such as strict validation on Role Type hierarchy, API privilege comparison, and new domain-level settings to restrict operations on user accounts.

Fix

DoS

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2025-09497

CVE-2025-47713

Affected Products

Apache Cloudstack

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-47713 · Security Note
• https://lists.apache.org/thread/y3qnwn59t8qggtdohv7k7vw39bgb3d60 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47713 · Vendor Advisory
• https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09497 · Security Note
• https://twitter.com/CVEnew/status/1932581590074282443 · Twitter Post
• https://t.me/cvetracker/25977 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1932699716497641724 · Twitter Post
• https://shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0 · Note