Vulnerability Description
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to (1) Cloud Controller or (2) Walrus with the internal message format and a modified user id.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eucalyptus | Eucalyptus | <= 3.1.0 |
Related Weaknesses (CWE)
References
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-06Vendor Advisory
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-06Vendor Advisory
FAQ
What is CVE-2012-4064?
CVE-2012-4064 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to gain privileges by sending a message to (1) Cloud Cont...
How severe is CVE-2012-4064?
CVE-2012-4064 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4064?
Check the references section above for vendor advisories and patch information. Affected products include: Eucalyptus Eucalyptus.