CVE-2012-4066: Medium severity eucalyptus vulnerability
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4066?
CVE-2012-4066 is considered a high severity vulnerability due to its potential to allow unauthorized data deletion and snapshot uploads.
How do I fix CVE-2012-4066?
To fix CVE-2012-4066, upgrade Eucalyptus to version 3.2.1 or later, which includes a patch to enforce request header signature requirements.
What versions of Eucalyptus are affected by CVE-2012-4066?
CVE-2012-4066 affects Eucalyptus versions 3.2.0 and earlier, as well as specific versions from 1.0 to 3.1.0.
What actions can be exploited due to CVE-2012-4066?
Exploitation of CVE-2012-4066 allows attackers to delete existing snapshots or upload unauthorized snapshots.
Is there a workaround for CVE-2012-4066 if upgrading is not possible?
Currently, the recommended solution for CVE-2012-4066 is to apply the available upgrades rather than a specific workaround.