What is GHSA-8g4h-4jg3-6x4f?

GHSA-8g4h-4jg3-6x4f is a security advisory published by GitHub Security Advisories with High severity. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's...

Which CVE IDs does GHSA-8g4h-4jg3-6x4f cover?

GHSA-8g4h-4jg3-6x4f covers the following CVE IDs: CVE-2026-59780. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8g4h-4jg3-6x4f?

GHSA-8g4h-4jg3-6x4f has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-8g4h-4jg3-6x4fHighCVSS 7.5

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-59780 →

📋 Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers.

LDAP configurations can be listed by any authenticated user with access to the listLdapConfigurations API. By default, this API is available to all default roles.

This issue affects Apache CloudStack: from 4.2.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.

Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-59780
https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc
https://github.com/advisories/GHSA-8g4h-4jg3-6x4f