CVE-2014-0031

Published: Jan 15, 2014Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.

Affected (35)

Products: Apache: Cloudstack

Apache

1 product

Cloudstack

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Apache Cloudstack	Up to 4.2.0
Apache Cloudstack	Version 2.0.1
Apache Cloudstack	Version 2.0
Apache Cloudstack	Version 2.1.0
Apache Cloudstack	Version 2.1.10
Apache Cloudstack	Version 2.1.1
Apache Cloudstack	Version 2.1.2
Apache Cloudstack	Version 2.1.3
Apache Cloudstack	Version 2.1.4
Apache Cloudstack	Version 2.1.5
Apache Cloudstack	Version 2.1.6
Apache Cloudstack	Version 2.1.7
Apache Cloudstack	Version 2.1.8
Apache Cloudstack	Version 2.1.9
Apache Cloudstack	Version 2.2.0
Apache Cloudstack	Version 2.2.11
Apache Cloudstack	Version 2.2.12
Apache Cloudstack	Version 2.2.13
Apache Cloudstack	Version 2.2.14
Apache Cloudstack	Version 2.2.1
Apache Cloudstack	Version 2.2.2
Apache Cloudstack	Version 2.2.3
Apache Cloudstack	Version 2.2.5
Apache Cloudstack	Version 2.2.6
Apache Cloudstack	Version 2.2.7
Apache Cloudstack	Version 2.2.8
Apache Cloudstack	Version 2.2.9
Apache Cloudstack	Version 3.0.0
Apache Cloudstack	Version 3.0.1
Apache Cloudstack	Version 3.0.2
Apache Cloudstack	Version 4.0.0 incubating
Apache Cloudstack	Version 4.0.1
Apache Cloudstack	Version 4.0.2
Apache Cloudstack	Version 4.1.0
Apache Cloudstack	Version 4.1.1