CVEvulnerability

CVE-2012-4064

6.5 MEDIUM Published 2012-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-264

Description

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to (1) Cloud Controller or (2) Walrus with the internal message format and a modified user id.

Affected configurations

• eucalyptus eucalyptus (<= 3.1.0) • eucalyptus eucalyptus 1.0 • eucalyptus eucalyptus 1.1 • eucalyptus eucalyptus 1.2 • eucalyptus eucalyptus 1.3 • eucalyptus eucalyptus 1.4 • eucalyptus eucalyptus 1.5.1 • eucalyptus eucalyptus 1.5.2 • eucalyptus eucalyptus 1.6 • eucalyptus eucalyptus 1.6.2 • eucalyptus eucalyptus 2.0 • eucalyptus eucalyptus 2.0.0 • eucalyptus eucalyptus 2.0.1 • eucalyptus eucalyptus 2.0.2 • eucalyptus eucalyptus 2.0.3 • eucalyptus eucalyptus 3.0 • eucalyptus eucalyptus 3.0.1 • eucalyptus eucalyptus 3.1.1

Related

Weakness · not in database (1)

References