Eucalyptus

eucalyptus

25 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Eucalyptus Management Console

eucalyptus_management_console

CVEs (25)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-4063 1Eucalyptus 1Eucalyptus Apr 29, 2026 Oct 1, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2012-3241 1Eucalyptus 1Eucalyptus Apr 29, 2026 Jul 17, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
CVE-2012-3240 1Eucalyptus 1Eucalyptus Apr 29, 2026 Jul 17, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request.
CVE-2011-0730 2Canonical Eucalyptus 2Eucalyptus Ubuntu Linux Apr 29, 2026 Jun 2, 2011 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to...Show more Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.Show less
CVE-2010-3905 1Eucalyptus 1Eucalyptus Apr 29, 2026 Dec 22, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other user...Show more The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.Show less