NVD

Id
45533  
Name
CVE-2012-4065  
Description
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a (1) Cloud Controller or (2) Walrus service via a crafted message, as demonstrated by changes to a volume, snapshot, or cloud configuration setting.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-01  
Modified Date
2012-10-02  
Seq
2012-4065  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228583 45533 CVE-2012-4065 http://www.eucalyptus.com/eucalyptus-cloud/security/esa-07  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29006 JVNDB-2012-004713 Eucalyptus における不特定の認証チェックを回避される脆弱性 Eucalyptus は、外部 SOAP Web サービスメッセージのバインディングを適切に制限しないため、不特定の認証チェックを回避され、(1) Cloud Controller、または (2) Walrus サービスへのアクセス権を取得される脆弱性が存在します。 CVE-2012-4065 57303 CVE-2012-4065 45533 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004713.html 2012-08-28 2012-10-03 View