Lucene search
GoogleOSV:CVE-2016-8520HistoryFeb 15, 2018 - 10:29 p.m.
CVE-2016-8520
2018-02-1522:29:00
Google
osv.dev
3
HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user’s permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eucalyptus | eq | 1.5.1 | |
| eucalyptus | eq | 3.3-m4 | |
| eucalyptus | eq | 3.0-alpha1 | |
| eucalyptus | eq | 3.0-rc2 | |
| eucalyptus | eq | 4.0.1 | |
| eucalyptus | eq | 3.0-beta3 | |
| eucalyptus | eq | 3.2.2 | |
| eucalyptus | eq | jaunty | |
| eucalyptus | eq | 4.0.0 | |
| eucalyptus | eq | 4.3.0 |
Related
nvd
nvd
CVE-2016-8520
2018-02-15 22:29:00
prion
prion
Design/Logic Flaw
2018-02-15 22:29:00
cvelist
cvelist
CVE-2016-8520
2017-01-04 00:00:00
cve
cve
CVE-2016-8520
2018-02-15 22:29:00
openvas
openvas
HP Helion Eucalyptus Multiple Vulnerabilities
2017-01-12 00:00:00