6.5
CVE-2011-0730
- EPSS 0.47%
- Veröffentlicht 02.06.2011 19:55:03
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle security@ubuntu.com
- CVE-Watchlists
- Unerledigt
LoginEucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eucalyptus ≫ Eucalyptus SwEditionenterprise Version < 2.0.2
Eucalyptus ≫ Eucalyptus Version < 2.0.3
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version10.10
Canonical ≫ Ubuntu Linux Version11.04
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.47% | 0.616 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.