111 matches found
CVE-2012-4066
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to 1 delete or 2 upload snapshots...
CVE-2012-4065
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...
Authorization
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a 1 Cloud Controller or 2 Walrus service via a crafted message, as demonstrated by...
Design/Logic Flaw
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to 1 Cloud Controller or 2 Walrus with the internal message format and a modified user id...
Eucalyptus Walrus Detection
Eucalyptus Walrus, a Java application that implements an interface compatible with Amazon's S3, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61609; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Eucalyptus Walr...
Eucalyptus Walrus REST Interface Key Verification Authentication Bypass (ESA-03)
The version of Eucalyptus Walrus hosted on the remote web server contains a flaw in the 'WalrusComponentLoginModule' class's 'authenticate' method that allows a remote, unauthenticated attacker to create, read, and write to buckets as an administrator. When an affected Walrus instance receives a...
CVE-2012-3240
The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...
Design/Logic Flaw
The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...
CVE-2012-3240
The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request...
CVE-2012-3240
The CVE affects Eucalyptus Walrus: versions 2.0.3 and 3.0.x prior to 3.0.2. Root cause is a flaw in WalrusComponentLoginModule.authenticate where the REST request is processed with admin context without proper trust verification, enabling a remote, unauthenticated attacker to gain administrator p...