CVEvulnerability
CVE-2012-3241
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-07-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
Affected configurations
• eucalyptus eucalyptus 2.0.3
• eucalyptus eucalyptus 3.0.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/49912 Vendor Advisory
- http://secunia.com/advisories/49916 Vendor Advisory
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04 Vendor Advisory
- http://secunia.com/advisories/49912 Vendor Advisory
- http://secunia.com/advisories/49916 Vendor Advisory
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04 Vendor Advisory