CVE-2012-4066

Name of the Vulnerable Software and Affected Versions Eucalyptus versions 3.2.0 and earlier

Description The internal message protocol for Walrus in Eucalyptus does not require signatures for unspecified request headers, allowing attackers to delete or upload snapshots.

Recommendations For versions 3.2.0 and earlier, consider restricting access to the Walrus internal message protocol until a fix is available. As a temporary workaround, review and monitor all snapshot uploads and deletions to minimize the risk of exploitation.