GHSA-72m7-8x56-r97p

Опубликовано: 21 авг. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 7.5

Описание

Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database.

This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.

Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database.

This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.

Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

Ссылки

EPSS

Процентиль: 1%

0.00096

Низкий

7.5 High

CVSS3

CVE ID

CVE-2026-59657

Дефекты

CWE-312

Связанные уязвимости

CVE-2026-59657

nvd

6 дней назад

Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

EPSS

Процентиль: 1%

0.00096

Низкий

7.5 High

CVSS3

CVE ID

CVE-2026-59657

Дефекты

CWE-312