GitHub Advisoryadvisory · Maven

GHSA-f5hm-h272-2qwm Eucalyptus Unauthorized Access to CC/NC Log Files

MEDIUM Published 2022-05-17 Modified 2023-08-29 Official page ↗
Aliases
CVE-2013-4766
Ecosystem
Maven
Packages
org.jclouds.api:eucalyptus
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2023-08-29

Affected packages

• Maven org.jclouds.api:eucalyptus: < 3.3.1 → fixed in 3.3.1

Description

The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.

Related

Alias · CVE (1)

  • CVE-2013-4766 The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References