Vulnerability Details : CVE-2012-3241
The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
Products affected by CVE-2012-3241
- cpe:2.3:a:eucalyptus:eucalyptus:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:eucalyptus:eucalyptus:2.0.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-3241
0.52%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 64 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-3241
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2012-3241
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-3241
-
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04
Vendor Advisory
-
http://secunia.com/advisories/49912
Sign inVendor Advisory
-
http://secunia.com/advisories/49916
Sign inVendor Advisory
Jump to