CVE-2013-4766: Infoleak
First published: Tue Sep 17 2013(Updated: )
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.jclouds.api:eucalyptus | <3.3.1 | 3.3.1 |
| Eucalyptus | <=3.3.0 | |
| Eucalyptus | =1.0 | |
| Eucalyptus | =1.1 | |
| Eucalyptus | =1.2 | |
| Eucalyptus | =1.3 | |
| Eucalyptus | =1.4 | |
| Eucalyptus | =1.5.1 | |
| Eucalyptus | =1.5.2 | |
| Eucalyptus | =1.6 | |
| Eucalyptus | =1.6.2 | |
| Eucalyptus | =2.0 | |
| Eucalyptus | =2.0.0 | |
| Eucalyptus | =2.0.1 | |
| Eucalyptus | =2.0.2 | |
| Eucalyptus | =2.0.3 | |
| Eucalyptus | =3.0 | |
| Eucalyptus | =3.0.1 | |
| Eucalyptus | =3.1.0 | |
| Eucalyptus | =3.1.1 | |
| Eucalyptus | =3.1.2 | |
| Eucalyptus | =3.2.0 | |
| Eucalyptus | =3.2.1 | |
| Eucalyptus | =3.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4766?
CVE-2013-4766 is classified with a high severity level due to the potential for unauthorized remote access to sensitive log files.
How do I fix CVE-2013-4766?
To fix CVE-2013-4766, upgrade Eucalyptus to version 3.3.1 or later.
What products are affected by CVE-2013-4766?
CVE-2013-4766 affects various versions of Eucalyptus software prior to 3.3.1.
Can CVE-2013-4766 lead to data breaches?
Yes, CVE-2013-4766 can potentially lead to data breaches as it allows remote attackers to read sensitive log files.
Is there any workaround for CVE-2013-4766 before applying a patch?
There are no known effective workarounds for CVE-2013-4766; upgrading is recommended as the only solution.
- collector/github-advisory-latest
- alias/GHSA-f5hm-h272-2qwm
- alias/CVE-2013-4766
- collector/github-advisory
- agent/author
- agent/type
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/trending
- agent/source
- agent/tags
- collector/nvd-cve
- agent/software-canonical-lookup-request
- collector/nvd-index
- package-manager/maven
- vendor/eucalyptus
- canonical/eucalyptus
- version/eucalyptus/3.3.0
- version/eucalyptus/1.0
- version/eucalyptus/1.1
- version/eucalyptus/1.2
- version/eucalyptus/1.3
- version/eucalyptus/1.4
- version/eucalyptus/1.5.1
- version/eucalyptus/1.5.2
- version/eucalyptus/1.6
- version/eucalyptus/1.6.2
- version/eucalyptus/2.0
- version/eucalyptus/2.0.0
- version/eucalyptus/2.0.1
- version/eucalyptus/2.0.2
- version/eucalyptus/2.0.3
- version/eucalyptus/3.0
- version/eucalyptus/3.0.1
- version/eucalyptus/3.1.0
- version/eucalyptus/3.1.1
- version/eucalyptus/3.1.2
- version/eucalyptus/3.2.0
- version/eucalyptus/3.2.1
- version/eucalyptus/3.2.2