CVE Vulnerabilities

CVE-2013-2296

Published: Sep 17, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:N
RedHat/V2
4.9 LOW
AV:N/AC:M/Au:S/C:P/I:P/A:N
RedHat/V3
Ubuntu
MEDIUM
root.io minimus.io echohq.com

Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting, (2) modifying the versioning setting, or (3) accessing activity logs via a request.

Affected Software

Name Vendor Start Version End Version
Eucalyptus Eucalyptus * 3.2.1 (including)
Eucalyptus Eucalyptus 1.0 (including) 1.0 (including)
Eucalyptus Eucalyptus 1.1 (including) 1.1 (including)
Eucalyptus Eucalyptus 1.2 (including) 1.2 (including)
Eucalyptus Eucalyptus 1.3 (including) 1.3 (including)
Eucalyptus Eucalyptus 1.4 (including) 1.4 (including)
Eucalyptus Eucalyptus 1.5.1 (including) 1.5.1 (including)
Eucalyptus Eucalyptus 1.5.2 (including) 1.5.2 (including)
Eucalyptus Eucalyptus 1.6 (including) 1.6 (including)
Eucalyptus Eucalyptus 1.6.2 (including) 1.6.2 (including)
Eucalyptus Eucalyptus 2.0 (including) 2.0 (including)
Eucalyptus Eucalyptus 2.0.0 (including) 2.0.0 (including)
Eucalyptus Eucalyptus 2.0.1 (including) 2.0.1 (including)
Eucalyptus Eucalyptus 2.0.2 (including) 2.0.2 (including)
Eucalyptus Eucalyptus 2.0.3 (including) 2.0.3 (including)
Eucalyptus Eucalyptus 3.0 (including) 3.0 (including)
Eucalyptus Eucalyptus 3.0.1 (including) 3.0.1 (including)
Eucalyptus Eucalyptus 3.1.0 (including) 3.1.0 (including)
Eucalyptus Eucalyptus 3.1.1 (including) 3.1.1 (including)
Eucalyptus Eucalyptus 3.1.2 (including) 3.1.2 (including)
Eucalyptus Eucalyptus 3.2.0 (including) 3.2.0 (including)
Eucalyptus Ubuntu lucid *
Eucalyptus Ubuntu oneiric *
Eucalyptus Ubuntu precise *
Eucalyptus Ubuntu upstream *

References