6.8

CVE-2014-5040

HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eucalyptus ≫ Eucalyptus Version 4.1.1
Eucalyptus ≫ Eucalyptus Version 4.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.57% 0.428
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 1.6 5.2
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
NIST 4.6 3.9 6.4
AV:N/AC:H/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463
Vendor Advisory
https://www.eucalyptus.com/resources/security/advisories/esa-32
Vendor Advisory