The Storage Controller (SC) component in Eucalyptus 3.4.2 up to and including 4.0.x prior to 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eucalyptus eucalyptus 3.4.3 |
||
eucalyptus eucalyptus 3.4.2 |
||
eucalyptus eucalyptus 4.0.0 |