Apache CloudStack 4.0.0 prior to 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x prior to 3.0.6 Patch C uses a hash of a predictable sequence, which makes it easier for remote malicious users to guess the console access URL via a brute force attack.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apache cloudstack 4.0.2 |
||
apache cloudstack 4.0.1 |
||
citrix cloudplatform 3.0.3 |
||
citrix cloudplatform 3.0.5 |
||
apache cloudstack 4.0.0 |
||
citrix cloudplatform 3.0.6 |
||
citrix cloudplatform 3.0 |
||
citrix cloudplatform 3.0.4 |
Vulmon