CVE-2016-3085 Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers to bypass authe...
MediumCVSS 6.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers to bypass authentication and access the user interface via vectors related to the SAML plugin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache cloudstack | = 4.7.0 | No fix listed |
| apache cloudstack | = 4.5.1 | No fix listed |
| apache cloudstack | = 4.5.2 | No fix listed |
| apache cloudstack | = 4.6.0 | No fix listed |
| apache cloudstack | = 4.6.1 | No fix listed |
| apache cloudstack | = 4.6.2 | No fix listed |
| apache cloudstack | = 4.8 | No fix listed |