Vulnerabilities > Citrix > Cloudstack

DATE CVE VULNERABILITY TITLE RISK
2012-10-26 CVE-2012-4501 Permissions, Privileges, and Access Controls vulnerability in multiple products
Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs.
network
low complexity
apache citrix CWE-264
critical
10.0