HIGH🇬🇧 English

CVE-2016-8520

CVSS 8.8v3.0pub. 2018-02-15upd. 2024-11-21

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Eucalyptus

    APP
    Eucalyptus
    ≤ 4.3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2016-8528HIGH8.8ten sam produkt

A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found.

CVE-2015-6861HIGH7.5ten sam produkt

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole p...

CVE-2013-4767HIGH10.0ten sam produkt

Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.

CVE-2012-3240HIGH7.5ten sam produkt

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator pr...

CVE-2012-3241HIGH7.5ten sam produkt

The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, whi...