Not rated

CVE-2016-8520 HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects…

Description

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

Affected products and versions

Product	Affected versions	Fixed in
Helion Eucalyptus	Versions not published

The 2 CVEs of Helion Eucalyptus →

CVE-2016-8528 A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found Not rated

Do you use Helion Eucalyptus?

Track this CVE Watch Helion Eucalyptus Check my SBOMs

www.cveye.io/en/cve/CVE-2016-8520

Timeline

Published February 15, 2018
Last modified September 16, 2024

References

95369 www.securityfocus.com
support.hpe.com support.hpe.com

Track this CVE

CVE-2016-8520 HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects…

Description

Affected products and versions

Other CVEs of Helion Eucalyptus