PT-2010-5159
CVE-2010-3905
·
تاريخ النشر
2010-12-22
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Eucalyptus versions 2.0.0 through 2.0.1
Description
The issue concerns the password reset feature in the administrator interface, which fails to perform authentication. This allows remote attackers to send password reset requests for other users, potentially gaining privileges.
Recommendations
For Eucalyptus versions 2.0.0 and 2.0.1, consider disabling the password reset feature in the administrator interface until a fix is available to prevent unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾