CVE-2014-5036

Eucalyptus 3.4.2-4.0.x - Exposure of Sensitive Information in Storage Controller Logs

Title source: llm
STIX 2.1

Description

The Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs.

References (3)

Core 3
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60359
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60712

Scores

EPSS 0.0032
EPSS Percentile 24.5%

Details

CWE
CWE-200
Status published
Products (3)
eucalyptus/eucalyptus 3.4.2
eucalyptus/eucalyptus 3.4.3
eucalyptus/eucalyptus 4.0.0
Published Sep 05, 2014
Tracked Since Feb 18, 2026