CVE-2013-6398
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in...
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
Exploit likelihood
What each source reports
NVD Score used
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
- Record
CVE-2013-6398- CVSS 2.0
- 2.8 Low
AV:N/AC:M/Au:M/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
- Record
CVE-2013-6398- Updated
- 2026-11-02
EUVDEUVD-2013-6219 No score
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
- Record
EUVD-2013-6219- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rrmx-vjgx-hhhm No score
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in...
The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.
- Record
GHSA-rrmx-vjgx-hhhm- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6398 is a low vulnerability (CVSS 2.8) in Apache Cloudstack, published January 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.67%, the 89th percentile. No source names a fixed version.
References
secunia.com/advisories/60284
issues.apache.org/jira/browse/CLOUDSTACK-5263
blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual
securityfocus.com/bid/69432
securitytracker.com/id/1030762
support.citrix.com/article/CTX140989
nvd.nist.gov/vuln/detail/CVE-2013-6398
github.com/advisories/GHSA-rrmx-vjgx-hhhm