CVE-2014-5037 Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eucalyptus | = 4.0.0 | No fix listed |
| eucalyptus | = 4.0.1 | No fix listed |
References
- 62055 third-party-advisory
- www.eucalyptus.com patch vendor-advisory