First published: Fri Mar 08 2013(Updated: )
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Eucalyptus Eucalyptus | <=3.2.0 | |
Eucalyptus Eucalyptus | =1.0 | |
Eucalyptus Eucalyptus | =1.1 | |
Eucalyptus Eucalyptus | =1.2 | |
Eucalyptus Eucalyptus | =1.3 | |
Eucalyptus Eucalyptus | =1.4 | |
Eucalyptus Eucalyptus | =1.5.1 | |
Eucalyptus Eucalyptus | =1.5.2 | |
Eucalyptus Eucalyptus | =1.6 | |
Eucalyptus Eucalyptus | =1.6.2 | |
Eucalyptus Eucalyptus | =2.0 | |
Eucalyptus Eucalyptus | =2.0.0 | |
Eucalyptus Eucalyptus | =2.0.1 | |
Eucalyptus Eucalyptus | =2.0.2 | |
Eucalyptus Eucalyptus | =2.0.3 | |
Eucalyptus Eucalyptus | =3.0 | |
Eucalyptus Eucalyptus | =3.0.1 | |
Eucalyptus Eucalyptus | =3.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.