NetSight
medium4.3

CVE-2013-4766

Eucalyptus Unauthorized Access to CC/NC Log Files

Impact

The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.jclouds.api:eucalyptus< 3.3.13.3.1

Affected products

VendorProductAffected versions
EucalyptusEucalyptus
through 3.3.0
Versions 1.0, 1.1, 1.2, 1.3, 1.4

Weakness classification

References