HIGH🇵🇱 Wersja polska

CVE-2016-8520

CVSS 8.8v3.0pub. 2018-02-15upd. 2024-11-21

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Eucalyptus

    APP
    Eucalyptus
    ≤ 4.3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-8528HIGH8.8ten sam produkt

A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found.

CVE-2015-6861HIGH7.5ten sam produkt

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole p...

CVE-2013-4767HIGH10.0ten sam produkt

Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.

CVE-2012-3240HIGH7.5ten sam produkt

The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator pr...

CVE-2012-3241HIGH7.5ten sam produkt

The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, whi...