Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

eucalyptus eucalyptus vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv2
CVE-2013-2296
Walrus in Eucalyptus prior to 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting,...
Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 1.3Eucalyptus Eucalyptus 1.2Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 2.0.2Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 3.1.2Eucalyptus Eucalyptus 3.1.0Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 1.6Eucalyptus Eucalyptus 1.0Eucalyptus Eucalyptus 3.2.0Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 1.5.2Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus
4.3
CVSSv2
CVE-2012-4067
Walrus in Eucalyptus prior to 3.2.2 allows remote malicious users to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.
Eucalyptus Eucalyptus 3.1.0Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 1.0Eucalyptus EucalyptusEucalyptus Eucalyptus 3.2.0Eucalyptus Eucalyptus 3.1.2Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 1.6Eucalyptus Eucalyptus 1.5.2Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 2.0.2Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 1.3Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 1.2
4.3
CVSSv2
CVE-2013-4766
The gather log service in Eucalyptus prior to 3.3.1 allows remote malicious users to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
Eucalyptus Eucalyptus 1.6Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 1.0Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus 1.2Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 3.1.0Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 3.1.2Eucalyptus Eucalyptus 3.2.0Eucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 1.5.2Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 3.2.1Eucalyptus EucalyptusEucalyptus Eucalyptus 1.3Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 2.0.2Eucalyptus Eucalyptus 3.0
5
CVSSv2
CVE-2012-4063
The Apache Santuario configuration in Eucalyptus prior to 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote malicious users to cause a denial of service via unspecified vectors.
Eucalyptus Eucalyptus 1.0Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 1.5.2Eucalyptus EucalyptusEucalyptus Eucalyptus 1.2Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 1.3Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 2.0.2Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 1.6
6.5
CVSSv2
CVE-2012-4064
Eucalyptus prior to 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to (1) Cloud Controller or (2) Walrus with the internal message format and a modified user id.
Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 1.6Eucalyptus EucalyptusEucalyptus Eucalyptus 1.2Eucalyptus Eucalyptus 1.3Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 1.0Eucalyptus Eucalyptus 1.5.2Eucalyptus Eucalyptus 2.0.2
3.5
CVSSv2
CVE-2012-4065
Eucalyptus prior to 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a (1) Cloud Controller or (2) Walrus service via a crafted messa...
Eucalyptus Eucalyptus 1.3Eucalyptus Eucalyptus 1.0Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0.2Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 1.5.2Eucalyptus EucalyptusEucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 1.2Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 1.6
5
CVSSv2
CVE-2012-4066
The internal message protocol for Walrus in Eucalyptus 3.2.0 and previous versions does not require signatures for unspecified request headers, which allows malicious users to (1) delete or (2) upload snapshots.
Eucalyptus Eucalyptus 1.4Eucalyptus Eucalyptus 2.0Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 3.1.0Eucalyptus Eucalyptus 1.6Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 2.0.0Eucalyptus Eucalyptus 1.6.2Eucalyptus Eucalyptus 1.5.1Eucalyptus Eucalyptus 1.2Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 1.3Eucalyptus EucalyptusEucalyptus Eucalyptus 1.0Eucalyptus Eucalyptus 1.1Eucalyptus Eucalyptus 1.5.2Eucalyptus Eucalyptus 2.0.2
5
CVSSv2
CVE-2013-4768
The web services APIs in Eucalyptus 2.0 up to and including 3.4.1 allow remote malicious users to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMw...
Eucalyptus Eucalyptus 3.4.0Eucalyptus Eucalyptus 3.2.0Eucalyptus Eucalyptus 3.2.2Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 3.0.1Eucalyptus Eucalyptus 3.1.0Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 3.3.1Eucalyptus Eucalyptus 2.0.3Eucalyptus Eucalyptus 2.0.2Eucalyptus Eucalyptus 2.0.1Eucalyptus Eucalyptus 3.4.1Eucalyptus Eucalyptus 3.3.2Eucalyptus Eucalyptus 3.1.2Eucalyptus Eucalyptus 3.2.1Eucalyptus Eucalyptus 3.3.0Eucalyptus Eucalyptus 2.0
2.1
CVSSv2
CVE-2014-5038
Eucalyptus 3.0.0 up to and including 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.
Eucalyptus Eucalyptus 3.3.0Eucalyptus Eucalyptus 3.2.2Eucalyptus Eucalyptus 3.2.1Eucalyptus Eucalyptus 3.2.0Eucalyptus Eucalyptus 3.4.0Eucalyptus Eucalyptus 3.3.1Eucalyptus Eucalyptus 3.1.2Eucalyptus Eucalyptus 3.1.0Eucalyptus Eucalyptus 4.0.1Eucalyptus Eucalyptus 4.0.0Eucalyptus Eucalyptus 3.4.3Eucalyptus Eucalyptus 3.4.2Eucalyptus Eucalyptus 3.0Eucalyptus Eucalyptus 3.4.1Eucalyptus Eucalyptus 3.3.2Eucalyptus Eucalyptus 3.1.1Eucalyptus Eucalyptus 3.0.1
4.6
CVSSv2
CVE-2015-6861
HPE Helion Eucalyptus 3.4.0 up to and including 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account.
Eucalyptus Eucalyptus 4.0.0Eucalyptus Eucalyptus 3.4.3Eucalyptus Eucalyptus 4.1.1Eucalyptus Eucalyptus 4.1.0Eucalyptus Eucalyptus 3.4.0Eucalyptus Eucalyptus 4.2.0Eucalyptus Eucalyptus 4.1.2Eucalyptus Eucalyptus 3.4.2Eucalyptus Eucalyptus 3.4.1Eucalyptus Eucalyptus 4.0.2Eucalyptus Eucalyptus 4.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook