Lucene search
HistoryNov 07, 2014 - 7:55 p.m.
CVE-2014-5038
eucalyptus
password leak
log files
cve-2014-5038
6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.
Affected configurations
Node
eucalyptuseucalyptusMatch3.0
OReucalyptuseucalyptusMatch3.0.1
OReucalyptuseucalyptusMatch3.1.0
OReucalyptuseucalyptusMatch3.1.1
OReucalyptuseucalyptusMatch3.1.2
OReucalyptuseucalyptusMatch3.2.0
OReucalyptuseucalyptusMatch3.2.1
OReucalyptuseucalyptusMatch3.2.2
OReucalyptuseucalyptusMatch3.3.0
OReucalyptuseucalyptusMatch3.3.1
OReucalyptuseucalyptusMatch3.3.2
OReucalyptuseucalyptusMatch3.4.0
OReucalyptuseucalyptusMatch3.4.1
OReucalyptuseucalyptusMatch3.4.2
OReucalyptuseucalyptusMatch3.4.3
OReucalyptuseucalyptusMatch4.0.0
OReucalyptuseucalyptusMatch4.0.1
Related
ubuntucve
ubuntucve
CVE-2014-5038
2014-11-07 00:00:00
prion
prion
Information disclosure
2014-11-07 19:55:00
nvd
nvd
CVE-2014-5038
2014-11-07 19:55:03
cvelist
cvelist
CVE-2014-5038
2014-11-07 19:00:00
6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2014-5038