fit2cloud cloudexplorer vulnerabilities and exploits

(subscribe to this query)

Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local malicious users to escalate privileges and obtain sensitive information via the cloud accounts parameter.

Fit2cloud Cloudexplorer Lite 1.4.1

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with `matching/API/`, which can cause a permission bypass. Version 1.4.1 contains a patch for this is...

Fit2cloud Cloudexplorer Lite

An issue in CloudExplorer Lite 1.3.1 allows an malicious user to obtain sensitive information via the login key component.

Fit2cloud Cloudexplorer Lite 1.3.1

Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite. The vulnerability has been fixed in version 1.4.0.

Fit2cloud Cloudexplorer Lite

CloudExplorer Lite is an open source, lightweight cloud management platform. Versions before 1.3.1 contain a command injection vulnerability in the installation function in module management. The vulnerability has been fixed in v1.3.1. There are no known workarounds aside from up...

Fit2cloud Cloudexplorer Lite

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite before 1.2.0 did not en...

Fit2cloud Cloudexplorer Lite

Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.

Fit2cloud Cloudexplorer Lite

CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Us...

Fit2cloud Cloudexplorer

CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no kno...

Fit2cloud Cloudexplorer

Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.

Fit2cloud Cloudexplorer Lite

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook