CVE-2024-29006 | Apache CloudStack up to 4.18.1.0/4.19.0.0 HTTP Header X-Forwarded-For authentication spoofing

A vulnerability has been found in Apache CloudStack up to 4.18.1.0/4.19.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to authentication bypass by spoofing.

This vulnerability is known as CVE-2024-29006. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.