{"api_version":"1","generated_at":"2026-07-23T08:18:24+00:00","cve":"CVE-2010-3905","urls":{"html":"https://cve.report/CVE-2010-3905","api":"https://cve.report/api/cve/CVE-2010-3905.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-3905","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3905"},"summary":{"title":"CVE-2010-3905","description":"The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.","state":"PUBLISHED","assigner":"canonical","published_at":"2010-12-22 21:00:15","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.ubuntu.com/usn/USN-1033-1","name":"http://www.ubuntu.com/usn/USN-1033-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-1033-1: Eucalyptus vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42666","name":"http://secunia.com/advisories/42666","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for eucalyptus - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42632","name":"http://secunia.com/advisories/42632","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Eucalyptus Admin UI Password Reset Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/45462","name":"http://www.securityfocus.com/bid/45462","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Eucalyptus Administrator Password Reset Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2010/3259","name":"http://www.vupen.com/english/advisories/2010/3259","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64167","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64167","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://open.eucalyptus.com/wiki/esa-01","name":"http://open.eucalyptus.com/wiki/esa-01","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ESA-01: password reset vulnerability | Eucalyptus Community","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/3260","name":"http://www.vupen.com/english/advisories/2010/3260","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3905","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3905","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"3905","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eucalyptus","cpe5":"eucalyptus","cpe6":"2.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3905","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eucalyptus","cpe5":"eucalyptus","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:26:12.270Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"45462","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45462"},{"name":"USN-1033-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1033-1"},{"name":"eucalyptus-adminui-security-bypass(64167)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64167"},{"name":"42666","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42666"},{"name":"ADV-2010-3260","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/3260"},{"name":"42632","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42632"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://open.eucalyptus.com/wiki/esa-01"},{"name":"ADV-2010-3259","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/3259"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-12-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical"},"references":[{"name":"45462","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45462"},{"name":"USN-1033-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1033-1"},{"name":"eucalyptus-adminui-security-bypass(64167)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64167"},{"name":"42666","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42666"},{"name":"ADV-2010-3260","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/3260"},{"name":"42632","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42632"},{"tags":["x_refsource_CONFIRM"],"url":"http://open.eucalyptus.com/wiki/esa-01"},{"name":"ADV-2010-3259","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/3259"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@ubuntu.com","ID":"CVE-2010-3905","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"45462","refsource":"BID","url":"http://www.securityfocus.com/bid/45462"},{"name":"USN-1033-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1033-1"},{"name":"eucalyptus-adminui-security-bypass(64167)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64167"},{"name":"42666","refsource":"SECUNIA","url":"http://secunia.com/advisories/42666"},{"name":"ADV-2010-3260","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/3260"},{"name":"42632","refsource":"SECUNIA","url":"http://secunia.com/advisories/42632"},{"name":"http://open.eucalyptus.com/wiki/esa-01","refsource":"CONFIRM","url":"http://open.eucalyptus.com/wiki/esa-01"},{"name":"ADV-2010-3259","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/3259"}]}}}},"cveMetadata":{"assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","assignerShortName":"canonical","cveId":"CVE-2010-3905","datePublished":"2010-12-22T20:00:00.000Z","dateReserved":"2010-10-12T00:00:00.000Z","dateUpdated":"2024-08-07T03:26:12.270Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-22 21:00:15","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eucalyptus:eucalyptus:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8974798-2246-4C12-A0A2-ADDB10563E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:eucalyptus:eucalyptus:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C98920E-5369-4690-885A-BEE737F029C3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"3905","Ordinal":"1","Title":"CVE-2010-3905","CVE":"CVE-2010-3905","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"3905","Ordinal":"1","NoteData":"The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.","Type":"Description","Title":"CVE-2010-3905"},{"CveYear":"2010","CveId":"3905","Ordinal":"2","NoteData":"2010-12-22","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"3905","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}