CVE-2012-4065

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...

CVE-2012-4065: Undefined Security Weakness

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...

CVE-2012-4064: Undefined Security Weakness

Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to 1 Cloud Controller or 2 Walrus with the internal message format and a modified user id...

PT-2012-5181

Name of the Vulnerable Software and Affected Versions Eucalyptus versions prior to 3.1.1 Description The issue allows remote authenticated users to gain privileges by sending a message to certain components with a modified user id. This is due to the improper restriction of the binding of externa...

PT-2012-5182

Name of the Vulnerable Software and Affected Versions Eucalyptus versions prior to 3.1.1 Description The issue allows remote authenticated users to bypass authorization checks and obtain direct access to the Cloud Controller or Walrus service via a crafted message. This can be demonstrated by...

Eucalyptus Cloud Controller Console Detection

The web console for Eucalyptus Cloud Controller, a Java application that implements an interface compatible with Amazon's EC2, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61610; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25";...