https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 23:55:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08203 bdu:2025-08203 https://cve.radiocsirt.org/vuln/bdu:2025-08203 https://cve.radiocsirt.org/vuln/euvd-2026-243778 EUVD-2026-243778 https://cve.radiocsirt.org/vuln/euvd-2026-243778 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30675 <p>In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the &#39;domainid&#39; parameter along with the &#39;filter=self&#39; or &#39;filter=selfexecutable&#39; values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.</p> <p>A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.</p> <p>This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller&#39;s scope rather than defaulting to the ROOT domain.</p> <p>Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.</p> <p>In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the &#39;domainid&#39; parameter along with the &#39;filter=self&#39; or &#39;filter=selfexecutable&#39; values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.</p> <p>A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.</p> <p>This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller&#39;s scope rather than defaulting to the ROOT domain.</p> <p>Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-30675 https://cve.radiocsirt.org/vuln/ghsa-9wjh-qx89-88ff <p>In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the &#39;domainid&#39; parameter along with the &#39;filter=self&#39; or &#39;filter=selfexecutable&#39; values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.</p> <p>A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.</p> <p>This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller&#39;s scope rather than defaulting to the ROOT domain.</p> <p>Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.</p> <p>In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the &#39;domainid&#39; parameter along with the &#39;filter=self&#39; or &#39;filter=selfexecutable&#39; values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.</p> <p>A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details.</p> <p>This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller&#39;s scope rather than defaulting to the ROOT domain.</p> <p>Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.</p> https://cve.radiocsirt.org/vuln/ghsa-9wjh-qx89-88ff https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1299 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und um seine Privilegien zu erweitern.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und um seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1299