CVE-2016-8520

EPSS 0.46%
Veröffentlicht 15.02.2018 22:29:00
Zuletzt bearbeitet 21.11.2024 02:59:31
Quelle security-alert@hpe.com
CVE-Watchlists
Login
Unerledigt
Login

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Eucalyptus ≫ Eucalyptus Version <= 4.3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.46%	0.632

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://www.securityfocus.com/bid/95369

Third Party Advisory

VDB Entry

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05363782

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-8520

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-8520

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-8520

EUVD