Beveiligingsadvies

CVE-2011-0730

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-06-02 19:00:00

Laatst bijgewerkt 2024-08-06 22:05:53

Toegewezen door canonical

CVSS-score geen score

Status PUBLISHED

Beschrijving

Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.

← Alle CVE's bekijken Bekijk op cve.org ↗