com.github.ptgoetz:whirr-storm (=0.1.0), com.proofpoint.cloudmanagement.service:cloud-management (>=1.2 <=1.3) +40 more potentially affected by CVE-2013-4766 via org.jclouds.api:eucalyptus (>=1.0-beta-9b <=1.5.9)

org.jclouds.api:eucalyptus MAVEN version =1.0-beta-9b, =1.2, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.5.0, =0.4.0, =0.4.0, =0.4.0, =0.5.0, =0.4.0, =0.4.0, =0.4.0, =0.5.0-rc.2 and more Source cves: CVE-2013-4766 Source advisory: OSV:GHSA-F5HM-H272-2QWM...

CVE-2013-4766

The CVE-2013-4766 issue affects Eucalyptus, where the gather log service (in CC/NC components) before version 3.3.1 permits remote attackers to read log files via an unspecified request to the Cluster Controller or Node Controller. The root cause is a insecure access path exposing log data, leadi...