CVE-2013-2756

no score yetEPSS 5.8%

Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging knowledge of the source code.

EPSS: 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2014-05-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apache:cloudstack
citrix:cloudplatform

References

http://mail-archives.apache.org/mod_mbox/cloudstack-dev/201304.mbox/%3C51786984.1060300%40stratosec.co%3E
http://osvdb.org/92748
http://secunia.com/advisories/53175
http://secunia.com/advisories/53204
http://support.citrix.com/article/CTX135815

Check your stack JSON