← CVE Intelligence

CVE-2025-66172

Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access to PUBLISHED

Description (CNA)

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user's backups and attach the volume to their own VMs. Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache CloudStackaffected 4.21.0.0 through 4.22.0.0

CWE

CWE-359

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.