Lucene search
HistoryJul 17, 2012 - 9:55 p.m.
CVE-2012-3241
vmware broker
eucalyptus
authentication bypass
remote attack
arbitrary command execution
cve-2012-3241
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.9%
The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
Affected configurations
Node
eucalyptuseucalyptusMatch2.0.3
OReucalyptuseucalyptusMatch3.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| eucalyptus:eucalyptus | eucalyptus | eq | 2.0.3 |
| eucalyptus:eucalyptus | eucalyptus | eq | 3.0.1 |
Related
nvd
nvd
CVE-2012-3241
2012-07-17 21:55:01
prion
prion
Command injection
2012-07-17 21:55:00
cvelist
cvelist
CVE-2012-3241
2012-07-17 21:00:00
ubuntucve
ubuntucve
CVE-2012-3241
2012-07-17 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.9%
Related for CVE-2012-3241