CVE-2016-3085: Apache CloudStack Authentication Bypass Vulnerability

2016-06-09 Thread John Kinsella
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 CVE-2016-3085: Apache CloudStack Authentication Bypass Vulnerability CVSS v2: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: The Apache Software Foundation Accelerite, Inc Versions affected: CloudStack versions 4.5.0 and newer Description: Apache

Re: CloudStack Authentication

2014-02-20 Thread Ian Duffy
Hi Maria, All the user authenticators broken up into plugins. Best way to learn about them is to read some of the code: https://github.com/apache/cloudstack/tree/master/plugins/user-authenticators With Cloudstack it will attempt to use each authenticator on login. If one fails it will try anothe

CloudStack Authentication

2014-02-19 Thread MarĂ­a Noelia Gil Valverde
Hello! I am a student and I'm doing work about authentication CloudStack. Does anyone could provide me a document or image that explains the authentication model, or a reference that I can use as an introduction? Thank you.