https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 07:59:47 +0000 https://cve.radiocsirt.org/vuln/cve-2025-30675 <p><strong>Affected:</strong> Apache Software Foundation Apache CloudStack</p> <p>In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the &#39;domainid&#39; parameter along with the &#39;filter=self&#39; or &#39;filter=selfexecutable&#39; values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.</p> <p>A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.</p> <p>This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller&#39;s scope rather than defaulting to the ROOT domain.</p> <p>Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache CloudStack</p> <p>In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the &#39;domainid&#39; parameter along with the &#39;filter=self&#39; or &#39;filter=selfexecutable&#39; values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.</p> <p>A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.</p> <p>This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller&#39;s scope rather than defaulting to the ROOT domain.</p> <p>Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.</p> https://cve.radiocsirt.org/vuln/cve-2025-30675