PT-2013-5180 · Eucalyptus Systems · Eucalyptus

Published 2013-09-17 · Updated 2022-05-17 · CVE-2013-4766

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Eucalyptus versions prior to 3.3.1

Description The issue allows remote attackers to read log files by sending an unspecified request to either the Cluster Controller (CC) or Node Controller (NC) component.

Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-4766

GHSA-F5HM-H272-2QWM

Affected Products

Eucalyptus

References · 4

• http://eucalyptus.com/resources/security/advisories/esa-13 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f5hm-h272-2qwm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4766 · Security Note
• https://github.com/eucalyptus/eucalyptus · Note