← All advisories

Unrated severityNVD Advisory· Published Jan 15, 2015· Updated Jun 17, 2026

CVE-2014-9593

CVE-2014-9593

Description

Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts API call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Apache/Cloudstack4 versions
cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*range: <=4.3.1
- cpe:2.3:a:apache:cloudstack:4.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cloudstack:4.4.1:*:*:*:*:*:*:*
- (no CPE)range: <4.3.2, >=4.4.0 <4.4.2

Patches

Vulnerability mechanics

References

4

docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.3.2/about.htmlnvdVendor Advisory
docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.4.2/fixed_issues.htmlnvdVendor Advisory
issues.apache.org/jira/browse/CLOUDSTACK-7952nvdVendor Advisory
secunia.com/advisories/62216nvd

News mentions

0

No linked articles in our index yet.