CVE-2010-3905: High severity eucalyptus vulnerability
The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3905?
CVE-2010-3905 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2010-3905?
To fix CVE-2010-3905, upgrade to Eucalyptus versions 2.0.2 or later which address this vulnerability.
Who is affected by CVE-2010-3905?
CVE-2010-3905 affects all installations of Eucalyptus versions 2.0.0 and 2.0.1.
What method do attackers use in CVE-2010-3905?
Attackers exploit CVE-2010-3905 by sending unauthorized password reset requests to gain access to other users' accounts.
What are the consequences of CVE-2010-3905?
The consequences of CVE-2010-3905 include unauthorized access to user accounts and potential administrative control over the Eucalyptus environment.