PT-2010-5159
CVE-2010-3905
·
Publicado
2010-12-22
·
Atualizado
2017-08-17
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Eucalyptus versions 2.0.0 through 2.0.1
Description
The issue concerns the password reset feature in the administrator interface, which fails to perform authentication. This allows remote attackers to send password reset requests for other users, potentially gaining privileges.
Recommendations
For Eucalyptus versions 2.0.0 and 2.0.1, consider disabling the password reset feature in the administrator interface until a fix is available to prevent unauthorized access.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾