Home > Vulnerability Database > CVE-2013-6398

Mend Vulnerability Database

CVE-2013-6398

Good to know:

Date: January 15, 2014

The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.

Language: Java

Severity Score

2.8

Related Resources (5)

Url: http://www.securityfocus.com/bid/69432

Url: http://secunia.com/advisories/55960

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-6398

Url: http://secunia.com/advisories/60284

Url: https://www.mend.io/vulnerability-database/CVE-2013-6398

Severity Score

2.8

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Top Fix

Upgrade Version

Upgrade to version 4.2.1

Learn More

CVSS v2

Base Score:	2.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	MULTIPLE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2013-6398

Good to know:

Date: January 15, 2014

Language: Java

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?