SN-10-06: Eucalyptus Ubuntu Enterprise Cloud
Unrestricted JSON Requests


Secure Network releases the security advisory SN-10-06 for a vulnerability found in Eucalyptus Ubuntu Enterprise Cloud.

SN-10-06: any legitimate user of the system, including non-administrative users, can leverage an internal JSON proxy to request any resource on the internet or the intranet, effectively using the Cloud Controller server as a proxy.