Apache CloudStack Backup Plugin Improper Access Vulnerability Allowing Unauthorized Volume Restoration and Attachment

A vulnerability in the Apache CloudStack Backup plugin, present in versions 4.21.0.0 and 4.22.0.0, allows users with authenticated accounts to improperly access and restore volumes from other users' backups. This restored volume can then be attached to the user's own virtual machines. The issue arises from flawed access logic in the backup plugin, enabled in specific CloudStack environments.

Impact

Exploitation of this vulnerability allows unauthorized users to access, restore, and attach volumes from other users' backups to their own virtual machines, potentially leading to data exposure or misuse of resources.

Remediation

Users are advised to upgrade to Apache CloudStack version 4.22.0.1 or later, which addresses this vulnerability.