Description
The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
References
- 49912 third-party-advisory
- 49916 third-party-advisory
- http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04