The internal message protocol for Walrus in Eucalyptus 3.2.0 and previous versions does not require signatures for unspecified request headers, which allows malicious users to (1) delete or (2) upload snapshots.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
eucalyptus eucalyptus 1.4 |
||
eucalyptus eucalyptus 2.0 |
||
eucalyptus eucalyptus 3.0 |
||
eucalyptus eucalyptus 3.0.1 |
||
eucalyptus eucalyptus 3.1.0 |
||
eucalyptus eucalyptus 1.6 |
||
eucalyptus eucalyptus 2.0.1 |
||
eucalyptus eucalyptus 2.0.0 |
||
eucalyptus eucalyptus 1.6.2 |
||
eucalyptus eucalyptus 1.5.1 |
||
eucalyptus eucalyptus 1.2 |
||
eucalyptus eucalyptus 2.0.3 |
||
eucalyptus eucalyptus 1.3 |
||
eucalyptus eucalyptus |
||
eucalyptus eucalyptus 1.0 |
||
eucalyptus eucalyptus 1.1 |
||
eucalyptus eucalyptus 1.5.2 |
||
eucalyptus eucalyptus 2.0.2 |
Vulmon