CVE-2013-4317

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%

exploitation probability

1.2%top 34% of all CVEs

observed exploitation

nono source reports it

In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their own.

Affected products

Apache Software Foundation · Apache CloudStack

References

http://seclists.org/oss-sec/2018/q1/1