Description (CNA)
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/60284
- http://secunia.com/advisories/55960
- https://issues.apache.org/jira/browse/CLOUDSTACK-5263
- https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual
- http://www.securityfocus.com/bid/69432
- http://www.securitytracker.com/id/1030762
- http://support.citrix.com/article/CTX140989
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/60284
- http://secunia.com/advisories/55960
- https://issues.apache.org/jira/browse/CLOUDSTACK-5263
- https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual
- http://www.securityfocus.com/bid/69432
- http://www.securitytracker.com/id/1030762
- http://support.citrix.com/article/CTX140989