CVE-2012-3241

EUVD-2012-3219
The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
eucalyptuseucalyptus
2.0.3
eucalyptuseucalyptus
3.0.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
eucalyptus
hardy
dne
lucid
not-affected
natty
not-affected
oneiric
not-affected
precise
not-affected
Common Weakness Enumeration
References
http://secunia.com/advisories/49912
http://secunia.com/advisories/49916
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04
http://secunia.com/advisories/49912
http://secunia.com/advisories/49916
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04