CVE-2012-4066

Опубликовано: 08 мар. 2013

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.

Ссылки

http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08
Vendor Advisory
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:eucalyptus:eucalyptus:*:*:*:*:*:*:*:*

Версия до 3.2.0 (включая)

cpe:2.3:a:eucalyptus:eucalyptus:1.0:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.1:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.2:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.3:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.4:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.6:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:3.0:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:eucalyptus:eucalyptus:3.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00196

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2012-4066

ubuntu

почти 13 лет назад

The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.

CVE-2012-4066

debian

почти 13 лет назад

The internal message protocol for Walrus in Eucalyptus 3.2.0 and earli ...

GHSA-4pvc-c6r4-qvq2

github

больше 3 лет назад

The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.

EPSS

Процентиль: 42%

0.00196

Низкий

5 Medium

CVSS2

Дефекты

CWE-287