CVE-2013-6398

Published: Jan 15, 2014Modified: Apr 29, 2026

2.8

Vector

AV:N/AC:M/Au:M/C:P/I:N/A:N

Exploitability: 5.5 / Impact: 2.9

Source: NVD

Description

The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.

Affected (35)

Products: Apache: Cloudstack

Apache

1 product

Cloudstack

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Apache Cloudstack	Up to 4.2.0
Apache Cloudstack	Version 2.0.1
Apache Cloudstack	Version 2.0
Apache Cloudstack	Version 2.1.0
Apache Cloudstack	Version 2.1.10
Apache Cloudstack	Version 2.1.1
Apache Cloudstack	Version 2.1.2
Apache Cloudstack	Version 2.1.3
Apache Cloudstack	Version 2.1.4
Apache Cloudstack	Version 2.1.5
Apache Cloudstack	Version 2.1.6
Apache Cloudstack	Version 2.1.7
Apache Cloudstack	Version 2.1.8
Apache Cloudstack	Version 2.1.9
Apache Cloudstack	Version 2.2.0
Apache Cloudstack	Version 2.2.11
Apache Cloudstack	Version 2.2.12
Apache Cloudstack	Version 2.2.13
Apache Cloudstack	Version 2.2.14
Apache Cloudstack	Version 2.2.1
Apache Cloudstack	Version 2.2.2
Apache Cloudstack	Version 2.2.3
Apache Cloudstack	Version 2.2.5
Apache Cloudstack	Version 2.2.6
Apache Cloudstack	Version 2.2.7
Apache Cloudstack	Version 2.2.8
Apache Cloudstack	Version 2.2.9
Apache Cloudstack	Version 3.0.0
Apache Cloudstack	Version 3.0.1
Apache Cloudstack	Version 3.0.2
Apache Cloudstack	Version 4.0.0 incubating
Apache Cloudstack	Version 4.0.1
Apache Cloudstack	Version 4.0.2
Apache Cloudstack	Version 4.1.0
Apache Cloudstack	Version 4.1.1