CVE-2013-6480

low Apache
CVSS v3 Base Score
2.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS Score
0.6%
Exploitation probability in 30 days
Top 31% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Confidentiality
P
Integrity
None
Availability
None
Published: January 7, 2014 (4510 days ago)
Last Modified: April 29, 2026
Vendor: Apache
Source: NVD

Description

Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.

CWE

CWE-200

Affected Products

apache libcloud

References

🔗 libcloud.apache.org 🔗 lists.opensuse.org 🔗 www.securityfocus.com 🔗 www.securityfocus.com 🔗 digitalocean.com