Apache CloudStack 4.4.4 / 4.5.1 VM Credential Exposure

Apache CloudStack provides an API for managing network, compute, storage, and user aspects of a CloudStack cloud. Under certain circumstances, the results of certain API calls may expose the root password for a virtual machine related to an API call. Versions 4.4.4 and 4.5.1 are affected.

Leave a Reply