Vulnerability Database

296,223

Total vulnerabilities in the database

CVE-2010-3905

The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.

  • Published: Dec 22, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-3905
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
eucalyptus / eucalyptus 2.0.0 2.0.0.x
eucalyptus / eucalyptus 2.0.1 2.0.1.x