[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjUUQURYyGo_jtRFHXMv_O64jzKMH4V6YscsvCVlaW0o":3,"g5a-risk:CVE-2024-41107":148},{"success":4,"data":5,"meta":145},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":25,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":44,"references":45,"referencesCount":85,"weaknesses":86,"weaknessesCount":44,"isActivelyExploited":95,"cisaInfo":25,"otxData":25,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":136,"notableEvents":137},"CVE-2024-41107","What is CVE-2024-41107?","The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and\u002For accessible by a SAML enabled user-account.\n\nAffected users are recommended to disable the SAML authentication plugin by setting the \"saml2.enabled\" global setting to \"false\", or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.","The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, a...","2024-07-19T11:15:03.323","2026-06-17T07:47:17.07",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[],[],0.1776,[35,35,35,35,35,35,35],"High",[39],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"apache","cloudstack","*","cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*",1,[46,52,55,61,66,69,73,75,77,79,81,83],{"url":47,"source":48,"tags":49},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F07\u002F19\u002F1","Openwall",[50,51],"Mailing List","Third Party Advisory",{"url":53,"source":48,"tags":54},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F07\u002F19\u002F2",[50,51],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fcloudstack.apache.org\u002Fblog\u002Fsecurity-release-advisory-cve-2024-41107","Apache",[59,60],"Mitigation","Vendor Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002Fapache\u002Fcloudstack\u002Fissues\u002F4519","GitHub",[65],"Issue Tracking",{"url":67,"source":57,"tags":68},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F5q06g8zvmhcw6w3tjr6r5prqdw6zckg3",[50,60],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fwww.shapeblue.com\u002Fshapeblue-security-advisory-apache-cloudstack-cve-2024-41107","Shapeblue",[51],{"url":47,"source":48,"tags":74},[50,51],{"url":53,"source":48,"tags":76},[50,51],{"url":56,"source":57,"tags":78},[59,60],{"url":62,"source":63,"tags":80},[65],{"url":67,"source":57,"tags":82},[50,60],{"url":70,"source":71,"tags":84},[51],12,[87],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","","Incomplete","Base","Simple",false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2024-41107? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-41107, a high severity cyber security vulnerability from 2024. The CloudStack SAML authentication (disabled by default) do...","CVE-2024-41107, CVE-2024-41107 vulnerability, CVE-2024-41107 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, apache security, cloudstack vulnerability","\u002Fwhat-is\u002Fcve-2024-41107",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-41107","Cybersecurity","CVE-2024-41107, CVE-2024-41107 vulnerability, CVE-2024-41107 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":25,"Negate":25,"Nodes":124},[125],{"Operator":126,"Negate":95,"CPEMatch":127},"OR",[128,132],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":129,"VersionStartExcluding":25,"VersionStartIncluding":130,"VersionEndExcluding":131,"VersionEndIncluding":25},"36C67E7A-D4BB-4387-B6E3-BBD3664BAC4F","4.5.0","4.18.2.2",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":133,"VersionStartExcluding":25,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":25},"3754C895-06B3-4750-B59E-AB9902E0BD73","4.19.0.0","4.19.1.0",[],[138],{"id":139,"eventType":140,"eventTime":141,"details":142,"label":143,"color":144},"0f262bfb-0d40-4a10-a38e-a57c02b704b7","LOW_EPSS_DELTA","2026-06-16T04:04:38.480207+00:00","Daily EPSS score decreased by 0.742 on 2024-07-21","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":146,"version":147},1793195344866,"2.0",{"score":149,"band":150,"action":151,"scoredAt":152},55,"Medium","Plan remediation","2026-10-28T07:03:07.591779+00:00"]