← CVE Intelligence

CVE-2024-29007

Apache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequences PUBLISHED

Description (CNA)

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache CloudStackaffected 4.9.1.0 through 4.18.1.0; affected 4.19.0.0

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.