Eucalyptus 4.0.0 up to and including 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eucalyptus eucalyptus 4.0.1 |
||
eucalyptus eucalyptus 4.0.0 |