PT-2014-6261
CVE-2014-5036
·
Published
2014-09-05
·
Updated
2014-09-08
Description by
CVSS 2.0
1.9
LowMetricsAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Eucalyptus versions 3.4.2 through 4.0.x
Description
The issue allows local users to obtain sensitive information, specifically CHAP user credentials, by reading the logs when Dell Equallogic SAN is used. This is due to the Storage Controller component logging these credentials.
Recommendations
For Eucalyptus versions 3.4.2 through 4.0.x, update to version 4.0.1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾