Exploit the possiblities

Apache CloudStack 4.0.0-incubating Information Disclosure

Apache CloudStack 4.0.0-incubating Information Disclosure
Posted Jan 12, 2013
Authored by Ahmad Emneina

The CloudStack security team was notified of a information disclosure vulnerability that exists in Apache CloudStack-4.0.0-incubating. With this vulnerability, when a user calls the createSSHKeyPair API command to create an SSH key pair to be used when authenticating to a user VM, the freshly generated SSH private key is rendered in a log file at INFO level on the CloudStack "master" server as well as being returned to the caller.

tags | advisory, info disclosure
advisories | CVE-2012-5616
MD5 | 081a33b1a80e16c318dc36b64ec2530c

Apache CloudStack 4.0.0-incubating Information Disclosure

Change Mirror Download

CVE-2012-5616: Apache CloudStack information disclosure vulnerability

Severity:
Low

CVSS:
3.5, AV:L,AC,H,Au,S,C:P,I:P,A:P

Vendors:
The Apache Software Foundation

Versions Affected:
Apache CloudStack 4.0.0-incubating

Description:
The CloudStack security team was notified of a information disclosure
vulnerability that exists in Apache CloudStack-4.0.0-incubating.
With this vulnerability, when a user calls the createSSHKeyPair API
command to create an SSH key pair to be used when authenticating
to a user VM, the freshly generated SSH private key is rendered in
a log file at INFO level on the CloudStack "master" server as well
as being returned to the caller.

While remediating this issue, it was also discovered that the AddHost
API call will log the password of the added host, and DeployVM and
ResetPasswordForVM will log the password of the VM for VMs that
take support password management by CloudStack.

To leverage these vulnerabilities, a malicious user would require read
access to logs on the management server, or another location where
those logs are stored (e.g. centralized logging, backup server)

Mitigation:
On the CloudStack management server, modify /etc/cloud/management/log4j.conf
so the CONSOLE and APISERVER appender logs with a Threshold of "WARN" or higher.

We will be addressing this in the upcoming release of Apache
CloudStack 4.1.0-incubating.

Credit:
This issue was identified by Ahmad Emneina of Citrix.

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

Want To Donate?


Bitcoin: 18PFeCVLwpmaBuQqd5xAYZ8bZdvbyEWMmU

File Archive:

January 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jan 1st
    2 Files
  • 2
    Jan 2nd
    13 Files
  • 3
    Jan 3rd
    16 Files
  • 4
    Jan 4th
    39 Files
  • 5
    Jan 5th
    26 Files
  • 6
    Jan 6th
    40 Files
  • 7
    Jan 7th
    2 Files
  • 8
    Jan 8th
    16 Files
  • 9
    Jan 9th
    25 Files
  • 10
    Jan 10th
    28 Files
  • 11
    Jan 11th
    44 Files
  • 12
    Jan 12th
    32 Files
  • 13
    Jan 13th
    2 Files
  • 14
    Jan 14th
    4 Files
  • 15
    Jan 15th
    31 Files
  • 16
    Jan 16th
    15 Files
  • 17
    Jan 17th
    16 Files
  • 18
    Jan 18th
    24 Files
  • 19
    Jan 19th
    15 Files
  • 20
    Jan 20th
    5 Files
  • 21
    Jan 21st
    0 Files
  • 22
    Jan 22nd
    0 Files
  • 23
    Jan 23rd
    0 Files
  • 24
    Jan 24th
    0 Files
  • 25
    Jan 25th
    0 Files
  • 26
    Jan 26th
    0 Files
  • 27
    Jan 27th
    0 Files
  • 28
    Jan 28th
    0 Files
  • 29
    Jan 29th
    0 Files
  • 30
    Jan 30th
    0 Files
  • 31
    Jan 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close