CVE-2015-6859

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

Design/Logic Flaw

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859...

Design/Logic Flaw

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

CVE-2015-5434

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...

Design/Logic Flaw

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

Design/Logic Flaw

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...

CVE-2015-6860

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859...

CVE-2015-6859

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

CVE-2015-5434

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...

CVE-2015-6861

CVE-2015-6861 affects HPE Helion Eucalyptus (versions 3.4.0–4.2.0). The issue allows remote authenticated users to bypass the intended AssumeRole permission and assume an IAM role by abusing a policy setting on a user’s account. Impact is described as bypassing IAM permission controls with potent...

CVE-2015-6860

CVE-2015-6860 affects Hewlett Packard Enterprise (HPE) Network Switches running software 15.16.x and 15.17.x, enabling local attackers to bypass intended access restrictions via unspecified vectors. Connected CNVD entries corroborate the same product and version range. The publicly provided docum...

CVE-2015-6859

CVE-2015-6859 affects HPE Network Switches running software 15.16.x and 15.17.x, where a local attacker can bypass security access restrictions via unspecified vectors. The connected sources confirm the affected product/versions and the local bypass impact, but do not provide the root cause, exac...

CVE-2015-6861

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

CVE-2015-5434

CVE-2015-5434 affects HPE Networking/Comware 5 and 7 (HP/H3C) devices. Multiple connected sources describe a vulnerability where remote, unauthenticated attackers can bypass access restrictions or cause a denial of service by abusing virtual routing and forwarding (VRF) hopping. The root issue is...

CVE-2015-6859: Undefined Security Weakness

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

CVE-2015-6860: Undefined Security Weakness

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859...

PT-2016-3688

Name of the Vulnerable Software and Affected Versions HPE Networking Products affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping." Recommendations At the...

PT-2016-1002

Name of the Vulnerable Software and Affected Versions HPE Network Switches versions 15.16.x through 15.17.x Description The issue is related to insufficient access control restrictions in the software of HPE Network Switches, allowing local users to bypass intended access restrictions...

CVE-2015-6861: Undefined Security Weakness

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

CVE-2015-5434: Undefined Security Weakness

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...