CVE-2013-2297: Medium severity Eucalyptus EuStore vulnerability

Published Sep 17, 2013

Updated

Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspecified vectors, a related issue to CVE-2013-2069.

Affected Software

4 affected components

Eucalyptus EuStore=emi_0400376721

Eucalyptus EuStore=emi_1347115203

Eucalyptus EuStore=emi_2425352071

Eucalyptus EuStore=emi_3868652036

Event History

Sep 17, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2297?

CVE-2013-2297 is classified as a medium severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2013-2297?

To mitigate CVE-2013-2297, users should set a strong root password for all affected Eucalyptus EuStore images.

Which software is affected by CVE-2013-2297?

CVE-2013-2297 affects Eucalyptus EuStore versions EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203.

What type of vulnerability is CVE-2013-2297?

CVE-2013-2297 is a local privilege escalation vulnerability that allows unauthorized access to elevated privileges.

What are the consequences of exploiting CVE-2013-2297?

Exploiting CVE-2013-2297 could lead to unauthorized users gaining root access, compromising the security of the system.