Description
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.eucalyptus.com/resources/security/advisories/esa-13
Scores
EPSS
0.0115
EPSS Percentile
63.1%
Details
CWE
CWE-200
Status
published
Products (24)
eucalyptus/eucalyptus
1.0
eucalyptus/eucalyptus
1.1
eucalyptus/eucalyptus
1.2
eucalyptus/eucalyptus
1.3
eucalyptus/eucalyptus
1.4
eucalyptus/eucalyptus
1.5.1
eucalyptus/eucalyptus
1.5.2
eucalyptus/eucalyptus
1.6
eucalyptus/eucalyptus
1.6.2
eucalyptus/eucalyptus
2.0
... and 14 more
Published
Sep 17, 2013
Tracked Since
Feb 18, 2026