ID | CVE-2011-0730 | ||||||
Sažetak | Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue. | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:L/Au:S/C:P/I:P/A:P | ||||||
Zadnje važnije ažuriranje | 29-11-2018 - 15:49 | ||||||
Objavljeno | 02-06-2011 - 19:55 |