CVE-2016-8520

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs

published February 15, 2018

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01357 · 71.3th percentile
Published
2018-02-15T22:00Z
EPSS history
Timeline
  • 15 FEB 22:00Z
    HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs
    cvelistv5