anonhaven

CVE-2026-61397

NONE EPSS 0.17%
Updated Aug 21, 2026
Apache Software Foundation
Parameter Value
Affected Versions 4.19.0.0 — 4.20.3.0
Fixed In 4.20.3.1
Type CWE-200 (Information Exposure)
Vendor Apache Software Foundation
Public PoC No

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1, which fixes the issue.

Weakness Type (CWE)

CWE-200 Information Exposure

Vulnerable Products

apache software foundation:apache cloudstack

References 1

https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc
security@apache.org
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-68745

Apache

None

CVE-2026-66797

Apache

5.4

CVE-2026-66722

Apache

None

CVE-2026-66721

Apache

None

CVE-2026-65613

Apache

None