← back
CVE-2013-6480

CVE-2013-6480

EPSS 2.1%
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/38937unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://libcloud.apache.org/security.htmlhttp://lists.opensuse.org/opensuse-updates/2014-02/msg00015.htmlhttps://digitalocean.com/blog_posts/transparency-regarding-data-securityhttps://github.com/fog/fog/issues/2525http://www.securityfocus.com/archive/1/530624/100/0/threadedhttp://www.securityfocus.com/bid/64617