CVE-2016-8520

CVE-2016-8520: vulnerability in Hewlett Packard Enterprise Helion Eucalyptus

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.
Related CVEs — Hewlett Packard Enterprise Helion Eucalyptus

In the same product, most dangerous first.