| Package | Affected versions | Patched versions |
|---|---|---|
| eucalyptus | < 2.0.2< 2.0.3 | 2.0.22.0.3 |
Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free