CVE-2014-5040

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-07-29T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-30T21:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.eucalyptus.com/resources/security/advisories/esa-32"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-5040", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463", "refsource": "CONFIRM", "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463"}, {"name": "https://www.eucalyptus.com/resources/security/advisories/esa-32", "refsource": "CONFIRM", "url": "https://www.eucalyptus.com/resources/security/advisories/esa-32"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T11:34:37.315Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.eucalyptus.com/resources/security/advisories/esa-32"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-5040", "datePublished": "2016-01-05T02:00:00.000Z", "dateReserved": "2014-07-22T00:00:00.000Z", "dateUpdated": "2024-08-06T11:34:37.315Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eucalyptus:eucalyptus:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "A00D8228-59F3-430A-BC8B-95E16591B597", "vulnerable": true}, {"criteria": "cpe:2.3:a:eucalyptus:eucalyptus:4.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "C43CF85C-9F9A-402A-ACF7-3C52A0618F13", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID."}, {"lang": "es", "value": "HP Helion Eucalyptus 4.1.x en versiones anteriores a 4.1.2 y HPE Helion Eucalyptus 4.2.x en versiones anteriores a 4.2.1 permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso y modificar (1) credenciales de clave de acceso aprovechando el conocimiento de una clave ID o (2) firmando certificados aprovechando el conocimiento de un ID de certificado arbitrario."}], "id": "CVE-2014-5040", "lastModified": "2026-06-17T00:10:58.390", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-01-05T02:59:00.113", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.eucalyptus.com/resources/security/advisories/esa-32"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.eucalyptus.com/resources/security/advisories/esa-32"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}