Vulnerability Description
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eucalyptus | Eucalyptus | <= 3.2.0 |
Related Weaknesses (CWE)
References
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08Vendor Advisory
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08Vendor Advisory
FAQ
What is CVE-2012-4066?
CVE-2012-4066 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.
How severe is CVE-2012-4066?
CVE-2012-4066 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4066?
Check the references section above for vendor advisories and patch information. Affected products include: Eucalyptus Eucalyptus.