Apache Software Foundation Cloudstack 4.19.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:cloudstack:4.19.1.0:*:*:*:*:*:*:*
part: a version: 4.19.1.0 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Cloudstack (b1f1c88b-9fea-59c1-bac5-7ae65864e2ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/cloudstack |
purl2cpe | 2026-06-01 10:14:29.567334 |
pkg:github/apache/cloudstack |
purl2cpe | 2026-06-01 10:14:29.567336 |
pkg:maven/org.apache.jclouds.api/cloudstack |
purl2cpe | 2026-06-01 10:14:29.567337 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42222 |
vulnerable | 2026-06-08 06:43:56.318376 |
Apache CloudStack: Unauthorised Network List Access
In Apache CloudStack 4.19.1.0, a regression in the network listing API allows unauthorised list access of network details for domain admin and normal user accounts. This vulnerability compromises tenant isolation, potentially leading to unauthorised access to network details, configurations and data.
Affected users are advised to upgrade to version 4.19.1.1 to address this issue. Users on older versions of CloudStack considering to upgrade, can skip 4.19.1.0 and upgrade directly to 4.19.1.1.
Published: 2024-08-07T07:16:13.765Z
Updated: 2025-03-14T15:57:32.158Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.