CVE-2012-4064

Eucalyptus before 3.1.1 is vulnerable: external SOAP messages are not properly restricted, allowing remote authenticated users to escalate privileges by sending a crafted internal-format message to Cloud Controller or Walrus with a modified user id. This is documented in multiple sources (e.g., R...