What’s Vulnerable › Vulnerabilities

CVE-2014-5037

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-11-07 · updated 2026-06-17
• Weakness: CWE-200

Description

Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.

Affected products

• Hewlett Packard Enterprise Helion Eucalyptus: 4.0.0, 4.0.1

References

• http://secunia.com/advisories/62055
• https://www.eucalyptus.com/resources/security/advisories/esa-25
• http://secunia.com/advisories/62055
• https://www.eucalyptus.com/resources/security/advisories/esa-25

Get alerted when CVE-2014-5037 or the next vulnerability affects your stack