CVE

Id
62703  
CVE No.
CVE-2013-2756  
Status
Candidate  
Description
Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging knowledge of the source code.  
Phase
Assigned (20130403)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
626051 62703 CVE-2013-2756 MLIST:[cloudstack-dev] 20130424 Apache CloudStack Security Advisory: Multiple vulnerabilities in Apache CloudStack  View
626052 62703 CVE-2013-2756 URL:http://mail-archives.apache.org/mod_mbox/cloudstack-dev/201304.mbox/%3C51786984.1060300@stratosec.co%3E  View
626053 62703 CVE-2013-2756 CONFIRM:http://support.citrix.com/article/CTX135815  View
626054 62703 CVE-2013-2756 BID:59463  View
626055 62703 CVE-2013-2756 URL:http://www.securityfocus.com/bid/59463  View
626056 62703 CVE-2013-2756 OSVDB:92748  View
626057 62703 CVE-2013-2756 URL:http://osvdb.org/92748  View
626058 62703 CVE-2013-2756 SECTRACK:1028473  View
626059 62703 CVE-2013-2756 URL:http://www.securitytracker.com/id/1028473  View
626060 62703 CVE-2013-2756 SECUNIA:53175  View
626061 62703 CVE-2013-2756 URL:http://secunia.com/advisories/53175  View
626062 62703 CVE-2013-2756 SECUNIA:53204  View
626063 62703 CVE-2013-2756 URL:http://secunia.com/advisories/53204  View
626064 62703 CVE-2013-2756 XF:cloudstack-cve20132756-sec-bypass(83781)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20573 JVNDB-2013-002148 Schneider Electric Modicon M340 の PLC モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Schneider Electric Modicon の M340 には、サービス運用妨害 (モジュールクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-2761 62703 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002148.html  View