CVE-2013-4766
Eucalyptus Unauthorized Access to CC/NC Log Files
CVE-2013-4766 is a medium vulnerability (CVSS 4.3) in Eucalyptus, published September 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. Fixed in org.jclouds.api:eucalyptus 3.3.1.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.15%EPSS, 67th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.3.1org.jclouds.api:eucalyptus +1 more
Description
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jclouds.api:eucalyptusMaven | before 3.3.1 | 3.3.1 |
org.jclouds.api:eucalyptusMaven | before 3.3.1, plus listed versions 1.0-beta-91.0-beta-9a1.0-beta-9b1.0-beta-9c1.0-beta-9d Show 45 moreShow less1.0.01.1.01.1.11.2.01.2.11.2.21.3.01.3.0-rc-11.3.0-rc-21.3.11.3.21.4.01.4.0-rc.11.4.0-rc.21.4.0-rc.31.4.11.4.21.5.01.5.0-alpha.11.5.0-alpha.21.5.0-alpha.31.5.0-alpha.41.5.0-alpha.51.5.0-alpha.61.5.0-beta.11.5.0-beta.101.5.0-beta.111.5.0-beta.21.5.0-beta.31.5.0-beta.41.5.0-beta.51.5.0-beta.61.5.0-beta.71.5.0-beta.81.5.0-beta.91.5.0-rc.11.5.11.5.101.5.21.5.31.5.41.5.51.5.61.5.71.5.8 | 3.3.1 |
What each source reports
NVD Score used
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
- Record
CVE-2013-4766- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
- Record
CVE-2013-4766- Updated
- 2026-11-02
EUVDEUVD-2022-3694No score
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
- Record
EUVD-2022-3694- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f5hm-h272-2qwmNo score
Eucalyptus Unauthorized Access to CC/NC Log Files
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
- Record
GHSA-f5hm-h272-2qwm- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVGHSA-f5hm-h272-2qwmNo score
Eucalyptus Unauthorized Access to CC/NC Log Files
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
- Record
GHSA-f5hm-h272-2qwm- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
Left out here: 1 version. The JSON record has them.