https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:53:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-41662 cnvd-2024-41662 https://cve.radiocsirt.org/vuln/cnvd-2024-41662 https://cve.radiocsirt.org/vuln/euvd-2026-195983 EUVD-2026-195983 https://cve.radiocsirt.org/vuln/euvd-2026-195983 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45462 <p>The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user&#39;s browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1.</p> <p>Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue.</p> <p>The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user&#39;s browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1.</p> <p>Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45462 https://cve.radiocsirt.org/vuln/ghsa-3785-76f5-g4rm <p>The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user&#39;s browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1.</p> <p>Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue.</p> <p>The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user&#39;s browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1.</p> <p>Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3785-76f5-g4rm https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3204 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erhöhen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3204