ISSUE TYPE
COMPONENT NAME
CLOUDSTACK VERSION
CONFIGURATION
advanced networking
SUMMARY
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
https://cloud.example.com/client/api?command=samlSso
The return error code show the Cloudstack Version that is considered as a CWE-200 level CVSS-2
<loginresponse cloud-stack-version="4.19.0.1">
<errorcode>531
</error code>
<errortext>Your authenticated user is not authorized for SAML Single Sign-On, please contact
your administrator</errortext>
</loginresponse>
Kali Linux Kali Tools Kali Docs Kali Forums Kali NetHunter
Exploit-DB Goo
This XML file does not appear to have any style information associated with it. The
-
<errorresponse cloud-stack-version="4.19.0.1">
<errorcode>401</errorcode> -<errortext>
unable to verify user credentials and/or request signature </errortext>
</errorresponse>
STEPS TO REPRODUCE
Request an unauthenticated API Request to the server
EXPECTED RESULTS
Error code witout sesible information
ACTUAL RESULTS
Return Cloudstack Version
ISSUE TYPE
COMPONENT NAME
CLOUDSTACK VERSION
CONFIGURATION
advanced networking
SUMMARY
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
https://cloud.example.com/client/api?command=samlSso
The return error code show the Cloudstack Version that is considered as a CWE-200 level CVSS-2
STEPS TO REPRODUCE
EXPECTED RESULTS
ACTUAL RESULTS