Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.
References
Link | Resource |
---|---|
https://www.eucalyptus.com/resources/security/advisories/esa-25 | Patch Vendor Advisory |
http://secunia.com/advisories/62055 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-11-07 11:55
Updated : 2014-11-10 05:32
NVD link : CVE-2014-5037
Mitre link : CVE-2014-5037
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
eucalyptus
- eucalyptus