GHSA-f5hm-h272-2qwm

Source

https://github.com/advisories/GHSA-f5hm-h272-2qwm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-f5hm-h272-2qwm/GHSA-f5hm-h272-2qwm.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-f5hm-h272-2qwm

Aliases

CVE-2013-4766

Published

2022-05-17T05:04:27Z

Modified

2024-12-06T05:37:35.470449Z

Summary

Eucalyptus Unauthorized Access to CC/NC Log Files

Details

The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.

Database specific

{
    "nvd_published_at": "2013-09-17T12:04:00Z",
    "cwe_ids": [
        "CWE-200"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-08-29T18:57:27Z"
}

References

Affected packages

Maven / org.jclouds.api:eucalyptus

Package

Name: org.jclouds.api:eucalyptus; View open source insights on deps.dev
Purl: pkg:maven/org.jclouds.api/eucalyptus

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.3.1

Affected versions

1.*

1.0-beta-9

1.0-beta-9a

1.0-beta-9b

1.0-beta-9c

1.0-beta-9d

1.0.0

1.1.0

1.1.1

1.2.0

1.2.1

1.2.2

1.3.0-rc-1

1.3.0-rc-2

1.3.0

1.3.1

1.3.2

1.4.0-rc.1

1.4.0-rc.2

1.4.0-rc.3

1.4.0

1.4.1

1.4.2

1.5.0-alpha.1

1.5.0-alpha.2

1.5.0-alpha.3

1.5.0-alpha.4

1.5.0-alpha.5

1.5.0-alpha.6

1.5.0-beta.1

1.5.0-beta.2

1.5.0-beta.3

1.5.0-beta.4

1.5.0-beta.5

1.5.0-beta.6

1.5.0-beta.7

1.5.0-beta.8

1.5.0-beta.9

1.5.0-beta.10

1.5.0-beta.11

1.5.0-rc.1

1.5.0

1.5.1

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.5.10