CVE-2013-6480 in Apache Libcloud
Summary
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.
Reservation
11/04/2013
Disclosure
01/07/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65999 | Apache Libcloud information disclosure | 200 | Proof-of-Concept | Not defined | CVE-2013-6480 |