VULNERABILITY INTELLIGENCE
CVE-2012-4501
CVSS score10 HIGH
EPSS probability7.77%
CISA KEVNot currently listed
Published2012-10-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs.