CVE-2016-8520 | BDVDB-2026-96487 Detail

Hewlett Packard EnterpriseHelion Eucalyptus

Description#

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/95369
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05363782

Exploit#

No public exploit known

History#

Version 12018-02-15Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.