What’s Vulnerable › Vulnerabilities

CVE-2024-41107: Apache CloudStack: SAML Signature Exclusion

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-19 · updated 2026-06-17
• Weakness: CWE-290

Description

The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account. Affected users are recommended to disable the SAML authentication plugin by setting the "saml2.enabled" global setting to "false", or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.

Affected products

• Apache Software Foundation Apache CloudStack: from 4.5.0 before 4.18.2.2; from 4.19.0.0 before 4.19.1.0 — fixed in 4.18.2.2, 4.19.1.0

How to fix

Upgrade to a fixed version: Apache Software Foundation Apache CloudStack 4.18.2.2, 4.19.1.0. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2024/07/19/1
• http://www.openwall.com/lists/oss-security/2024/07/19/2
• https://cloudstack.apache.org/blog/security-release-advisory-cve-2024-41107
• https://github.com/apache/cloudstack/issues/4519
• https://lists.apache.org/thread/5q06g8zvmhcw6w3tjr6r5prqdw6zckg3
• https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-cve-2024-41107
• http://www.openwall.com/lists/oss-security/2024/07/19/1
• http://www.openwall.com/lists/oss-security/2024/07/19/2
• https://cloudstack.apache.org/blog/security-release-advisory-cve-2024-41107
• https://github.com/apache/cloudstack/issues/4519
• https://lists.apache.org/thread/5q06g8zvmhcw6w3tjr6r5prqdw6zckg3
• https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-cve-2024-41107

Get alerted when CVE-2024-41107 or the next vulnerability affects your stack