CVE-2012-3241 The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eucalyptus | = 2.0.3 | No fix listed |
| eucalyptus | = 3.0.1 | No fix listed |
References
- 49912 third-party-advisory vendor-advisory
- 49916 third-party-advisory vendor-advisory
- www.eucalyptus.com vendor-advisory