CVEvulnerability
CVE-2010-3905
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.
Affected configurations
• eucalyptus eucalyptus 2.0.0
• eucalyptus eucalyptus 2.0.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://open.eucalyptus.com/wiki/esa-01 open.eucalyptus.com
- http://secunia.com/advisories/42632 Vendor Advisory
- http://secunia.com/advisories/42666 Vendor Advisory
- http://www.securityfocus.com/bid/45462 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1033-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/3259 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3260 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64167 exchange.xforce.ibmcloud.com
- http://open.eucalyptus.com/wiki/esa-01 open.eucalyptus.com
- http://secunia.com/advisories/42632 Vendor Advisory
- http://secunia.com/advisories/42666 Vendor Advisory
- http://www.securityfocus.com/bid/45462 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1033-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/3259 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3260 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64167 exchange.xforce.ibmcloud.com