CVE-2025-22828

📜 Description

Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments (annotations) on resources they are not authorized to access. UUIDs can be exposed in various parts of the application, such as when a user initially has access to a resource but later loses it due to administrative restrictions.

🔍 Vulnerability Details

• Type: Broken Access Control
• Impact: Unauthorized access to annotations and potentially sensitive data
• Affected Versions: 4.16.0 and later
• CWE: Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)

🎬 Demonstration Videos

Unauthorized Access to Annotations (listAnnotations command)

Unauthorized Adding of Annotations (addAnnotations command)