low3.5
CVE-2012-4065
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspec…
Impact
Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remote authenticated users to bypass unspecified authorization checks and obtain direct access to a (1) Cloud Controller or (2) Walrus service via a crafted message, as demonstrated by changes to a volume, snapshot, or cloud configuration setting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eucalyptus | Eucalyptus | through 3.1.0 Versions 1.0, 1.1, 1.2, 1.3, 1.4 |