{"id":"CVE-2013-4766","aliases":["EUVD-2022-3694","GHSA-f5hm-h272-2qwm"],"status":"published","title":"Eucalyptus Unauthorized Access to CC/NC Log Files","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01151,"percentile":0.67127,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2013-09-17T01:00:00Z","modified":"2026-06-16T23:57:51Z","fixes":[{"ecosystem":"Maven","package":"org.jclouds.api:eucalyptus","fixed_in":["3.3.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jclouds.api:eucalyptus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jclouds.api:eucalyptus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1"}]}],"versions":["1.0-beta-9","1.0-beta-9a","1.0-beta-9b","1.0-beta-9c","1.0-beta-9d","1.0.0","1.1.0","1.1.1","1.2.0","1.2.1","1.2.2","1.3.0","1.3.0-rc-1","1.3.0-rc-2","1.3.1","1.3.2","1.4.0","1.4.0-rc.1","1.4.0-rc.2","1.4.0-rc.3","1.4.1","1.4.2","1.5.0","1.5.0-alpha.1","1.5.0-alpha.2","1.5.0-alpha.3","1.5.0-alpha.4","1.5.0-alpha.5","1.5.0-alpha.6","1.5.0-beta.1","1.5.0-beta.10","1.5.0-beta.11","1.5.0-beta.2","1.5.0-beta.3","1.5.0-beta.4","1.5.0-beta.5","1.5.0-beta.6","1.5.0-beta.7","1.5.0-beta.8","1.5.0-beta.9","1.5.0-rc.1","1.5.1","1.5.10","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.5.9"]}],"products":[{"vendor":"eucalyptus","product":"eucalyptus"}],"references":[{"url":"http://www.eucalyptus.com/resources/security/advisories/esa-13","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4766","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f5hm-h272-2qwm"},{"url":"https://github.com/eucalyptus/eucalyptus","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2013-4766","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","status":"published","published":"2013-09-17T01:00:00Z","modified":"2024-09-16T22:34:57.146Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2022-3694","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","status":"published","published":"2013-09-17T01:00:00Z","modified":"2024-09-16T22:34:57Z","updated_at":"2026-11-03T00:55:02.001238Z"}],"ghsa":[{"id":"GHSA-f5hm-h272-2qwm","title":"Eucalyptus Unauthorized Access to CC/NC Log Files","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","status":"published","published":"2022-05-17T05:04:27Z","modified":"2023-08-29T18:57:28Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:37:01.345964Z"}],"nvd":[{"id":"CVE-2013-4766","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","status":"published","published":"2013-09-17T12:04:16.087Z","modified":"2026-06-16T23:57:51.703Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:35.248411Z"}],"osv":[{"id":"GHSA-f5hm-h272-2qwm","title":"Eucalyptus Unauthorized Access to CC/NC Log Files","description":"The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.","status":"published","published":"2022-05-17T05:04:27Z","modified":"2024-12-06T05:39:31.820127Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:46.006631Z"}]}}