Lucene search
HistoryDec 22, 2010 - 9:00 p.m.
CVE-2010-3905
eucalyptus
password reset
authentication bypass
remote attack
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.4%
The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eucalyptus:eucalyptus | eucalyptus | eq | 2.0.0 |
| eucalyptus:eucalyptus | eucalyptus | eq | 2.0.1 |
Related
securityvulns
securityvulns
Eucalyptus unauthorized access
2010-12-17 00:00:00
[USN-1033-1] Eucalyptus vulnerability
2010-12-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1033-1)
2011-01-04 00:00:00
Ubuntu Update for eucalyptus vulnerability USN-1033-1
2011-01-04 00:00:00
cvelist
cvelist
CVE-2010-3905
2010-12-22 20:00:00
nessus
nessus
Ubuntu 10.10 : eucalyptus vulnerability (USN-1033-1)
2010-12-17 00:00:00
prion
prion
Authentication flaw
2010-12-22 21:00:00
ubuntu
ubuntu
Eucalyptus vulnerability
2010-12-16 00:00:00
ubuntucve
ubuntucve
CVE-2010-3905
2010-12-16 00:00:00
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.4%
Related for CVE-2010-3905