Unscored severity · published Jan 15, 2014
CVE-2013-6398
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass…
–
CVSS
3.7%
EPSS
No
On KEV
Description
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Cloudstack · Apache
through 4.2.0; 2.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; +29 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6398
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6398
Vendor Advisory
http://secunia.com/advisories/55960
secunia.com
http://secunia.com/advisories/60284
support.citrix.com
http://support.citrix.com/article/CTX140989
www.securityfocus.com
http://www.securityfocus.com/bid/69432
www.securitytracker.com
http://www.securitytracker.com/id/1030762
Vendor Advisory
https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual
More from Cloudstack
9.9
CVE-2024-50386
Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances
9.8
CVE-2024-39864
The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via integration.api.port global setting) for…
9.8
CVE-2024-38346
The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands on targeted hypervisors and CloudStack management server…
9.8
CVE-2024-29006
By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an API request
9.8
CVE-2022-35741
Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE) injection