NVD

Id
41456  
Name
CVE-2013-6398  
Description
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.  
Reject
 
CVSS Version
2  
CVSS Score
2.8  
Severity
Low  
CVSS Base Score
2.8  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:N/AC:M/Au:M/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-01-15  
Modified Date
2014-09-04  
Seq
2013-6398  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209452 41456 CVE-2013-6398 http://support.citrix.com/article/CTX140989  View
209453 41456 CVE-2013-6398 69432  View
209454 41456 CVE-2013-6398 1030762  View
209455 41456 CVE-2013-6398 https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual  View
209456 41456 CVE-2013-6398 https://issues.apache.org/jira/browse/CLOUDSTACK-5263  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24268 JVNDB-2013-005843 Apache CloudStack の仮想ルータにおける制限を回避される脆弱性 Apache CloudStack の仮想ルータは、再起動後にファイアウォールルールにソースの制限を保存しないため、制限を回避される脆弱性が存在します。 CVE-2013-6398 66340 CVE-2013-6398 41456 2.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005843.html 2013-12-23 2015-08-04 View