CVE-2014-7807 Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which triggers an unauthenticated bind.
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a login request without a password, which triggers an unauthenticated bind.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache cloudstack | = 4.3.0 | No fix listed |
| apache cloudstack | = 4.3.1 | No fix listed |
| apache cloudstack | = 4.4.0 | No fix listed |
| apache cloudstack | = 4.4.1 | No fix listed |