CVE-2024-41107

Katalog CVE

CVSS 8.1 · High EPSS 17,8%

Kerentanan Authentication Bypass by Spoofing pada apache cloudstack. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account. Affected users are recommended to disable the SAML authentication plugin by setting the "saml2.enabled" global setting to "false", or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.

Rincian

Terbit di NVD

19 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-290: Authentication Bypass by Spoofing

EPSS (30 hari)

17,8% peluang dieksploitasi; lebih tinggi dari 97,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cloudstack.apache.org/blog/security-release-advisory-cve-2024-41107 mitigasi · advisory vendor
• https://lists.apache.org/thread/5q06g8zvmhcw6w3tjr6r5prqdw6zckg3 mailing list · advisory vendor
• http://www.openwall.com/lists/oss-security/2024/07/19/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/07/19/2 mailing list · advisory pihak ketiga
• https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-cve-2024-41107 advisory pihak ketiga
• https://github.com/apache/cloudstack/issues/4519 issue tracking