ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these. This leads to privilege escalation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
zstack zstack |
Vulmon