Lucene search

K
cve[email protected]CVE-2013-2297
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2297

2022-10-0316:15:00
CWE-255
web.nvd.nist.gov
17
eucalyptus eustore
blank root password
privilege escalation
cve-2013-2297
emi 3868652036
emi 0400376721
emi 2425352071
emi 1347115203
cve-2013-2069
nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspecified vectors, a related issue to CVE-2013-2069.

Affected configurations

NVD
Node
eucalyptuseustoreMatchemi_0400376721
OR
eucalyptuseustoreMatchemi_1347115203
OR
eucalyptuseustoreMatchemi_2425352071
OR
eucalyptuseustoreMatchemi_3868652036

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%