← back
CVE-2024-29006

Apache CloudStack: x-forwarded-for HTTP header parsed by default

CVSS 9.8 CRITICALEPSS 0.9%CWE-290
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 0.9%KEV nãoPoC Nuclei Metasploit Patch referenciado
Lifecycle
04 Apr 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an API request. This could lead to authentication bypass and other operational problems should an attacker decide to spoof their IP address this way. Users are recommended to upgrade to CloudStack version 4.18.1.1 or 4.19.0.1, which fixes this issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →