Apache CloudStack 4.20.3.0/4.22.1.0 SAML Authentication certificate validation

Summaryinfo

A vulnerability categorized as problematic has been discovered in Apache CloudStack 4.20.3.0/4.22.1.0. This affects an unknown part of the component SAML Authentication. Executing a manipulation can lead to certificate validation. This vulnerability is handled as CVE-2026-68745. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability classified as problematic was found in Apache CloudStack 4.20.3.0/4.22.1.0. This vulnerability affects an unknown functionality of the component SAML Authentication. The manipulation with an unknown input leads to a certificate validation vulnerability. The CWE definition for the vulnerability is CWE-295. The product does not validate, or incorrectly validates, a certificate. As an impact it is known to affect integrity. CVE summarizes:

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the management server, after which it can allow logging on with forged signatures. Users are recommended to upgrade to versions 4.20.3.1 or 4.22.1.1 and above, which fix this issue.

The advisory is available at lists.apache.org. This vulnerability was named CVE-2026-68745 since 07/31/2026. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 08/21/2026). This vulnerability is assigned to T1587.003 by the MITRE ATT&CK project.

Upgrading to version 4.20.3.1 or 4.22.1.1 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Cloud Software

Vendor

• Apache

Name

• CloudStack

Version

• 4.20.3.0
• 4.22.1.0

License

• open-source

Website

• Vendor: https://www.apache.org/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion