CVE-2010-3905

Опубликовано: 22 дек. 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.

Ссылки

http://open.eucalyptus.com/wiki/esa-01
http://secunia.com/advisories/42632
Vendor Advisory
http://secunia.com/advisories/42666
Vendor Advisory
http://www.securityfocus.com/bid/45462
http://www.ubuntu.com/usn/USN-1033-1
http://www.vupen.com/english/advisories/2010/3259
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3260
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64167
http://open.eucalyptus.com/wiki/esa-01
http://secunia.com/advisories/42632
Vendor Advisory
http://secunia.com/advisories/42666
Vendor Advisory
http://www.securityfocus.com/bid/45462
http://www.ubuntu.com/usn/USN-1033-1
http://www.vupen.com/english/advisories/2010/3259
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3260
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64167

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:eucalyptus:eucalyptus:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01389

Низкий

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2010-3905

ubuntu

около 15 лет назад

CVE-2010-3905

debian

около 15 лет назад

The password reset feature in the administrator interface for Eucalypt ...

GHSA-gm26-863f-73h9

github

больше 3 лет назад

EPSS

Процентиль: 80%

0.01389

Низкий

7.5 High

CVSS2

Дефекты

CWE-287