Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.
| Software | From | Fixed in |
|---|---|---|
| eucalyptus / eucalyptus | 4.0.1 | 4.0.1.x |
| eucalyptus / eucalyptus | 4.0.0 | 4.0.0.x |