Auth bypass in Apache Cloudstack
CVE-2024-45461
The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to access and modify quota-related configurations and data. This issue affects Apache CloudStack from 4.7.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1, where the Quota feature is enabled. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Alternatively, users that do not use the Quota feature are advised to disabled the plugin by setting the global setting "quota.enable.service" to "false".
Vulnerability class: Broken Access Control
EPSS: 0.007 (50.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L.
Affected products
- Apache Cloudstack
- Apache Software Foundation Cloudstack Quota Plugin — versions 4.7.0, 4.19.0.0
Weakness classification (CWE)
References
- security@apache.org (vendor-advisory, patch, Vendor Advisory)
- security@apache.org (Vendor Advisory, mailing-list)
- security@apache.org (third-party-advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2024-45461?
- CVE-2024-45461 is a medium-severity vulnerability in Apache Cloudstack, classified under Missing Authorization. CVSS score: 5.7/10. Published 2024-10-16.
- How severe is CVE-2024-45461?
- Medium severity. CVSS v3 base score is 5.7 out of 10.