CVE-2014-5037 in Eucalyptus

Riassunto

di MITRE

Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 22/07/2014
• Divulgazione: 07/11/2014
• Moderazione: accettato
• Voce: VDB-72851
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 4.0 (VulDB)
• EPSS: 0.00345
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-5037
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-5037
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-5037/