PT-2018-5014
CVE-2016-8520
·
تاريخ النشر
2018-02-15
·
تاريخ التحديث
2018-03-13
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
HPE Helion Eucalyptus versions 4.3.0 and earlier
Description
The issue arises from incorrect permission checks for IAM users accessing versioned objects and ACLs. As a result, authenticated users with S3 permissions may also be able to access versioned data.
Recommendations
For HPE Helion Eucalyptus versions 4.3.0 and earlier, consider restricting access to versioned objects and ACLs to prevent unauthorized data access until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾