CVE-2010-3905

Опубликовано: 22 дек. 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.

Ссылки

http://open.eucalyptus.com/wiki/esa-01
http://secunia.com/advisories/42632
Vendor Advisory
http://secunia.com/advisories/42666
Vendor Advisory
http://www.securityfocus.com/bid/45462
http://www.ubuntu.com/usn/USN-1033-1
http://www.vupen.com/english/advisories/2010/3259
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3260
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64167
http://open.eucalyptus.com/wiki/esa-01
http://secunia.com/advisories/42632
Vendor Advisory
http://secunia.com/advisories/42666
Vendor Advisory
http://www.securityfocus.com/bid/45462
http://www.ubuntu.com/usn/USN-1033-1
http://www.vupen.com/english/advisories/2010/3259
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3260
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64167

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:eucalyptus:eucalyptus:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02863

Низкий

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2010-3905

ubuntu

больше 15 лет назад

CVE-2010-3905

debian

больше 15 лет назад

The password reset feature in the administrator interface for Eucalypt ...

GHSA-gm26-863f-73h9

github

около 4 лет назад

EPSS

Процентиль: 85%

0.02863

Низкий

7.5 High

CVSS2

Дефекты

CWE-287