CVE-2012-4064

Name of the Vulnerable Software and Affected Versions Eucalyptus versions prior to 3.1.1

Description The issue allows remote authenticated users to gain privileges by sending a message to certain components with a modified user id. This is due to the improper restriction of the binding of external SOAP web-services messages. The components affected include Cloud Controller and Walrus, where messages can be sent with the internal message format and a modified user id.

Recommendations For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue.