CVE-2012-4066

The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to 1 delete or 2 upload snapshots...

CVE-2012-4066: Improper Authentication

The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to 1 delete or 2 upload snapshots...

CVE-2012-4065

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...

Design/Logic Flaw

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to 1 Cloud Controller or 2 Walrus with the internal message format and a modified user id...

Authorization

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...

CVE-2012-4065: Undefined Security Weakness

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...

Eucalyptus Walrus REST Interface Key Verification Authentication Bypass (ESA-03)

The version of Eucalyptus Walrus hosted on the remote web server contains a flaw in the 'WalrusComponentLoginModule' class's 'authenticate' method that allows a remote, unauthenticated attacker to create, read, and write to buckets as an administrator. When an affected Walrus instance receives a...

Eucalyptus Walrus Detection

Eucalyptus Walrus, a Java application that implements an interface compatible with Amazon's S3, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61609; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Eucalyptus Walr...

CVE-2012-3240

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...

Design/Logic Flaw

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...

CVE-2012-3240

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...

CVE-2012-3240

The CVE affects Eucalyptus Walrus: versions 2.0.3 and 3.0.x prior to 3.0.2. Root cause is a flaw in WalrusComponentLoginModule.authenticate where the REST request is processed with admin context without proper trust verification, enabling a remote, unauthenticated attacker to gain administrator p...

CVE-2012-3240

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...

CVE-2012-3240: Undefined Security Weakness

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...