Vulnerabilities > Eucalyptus > Eucalyptus > 4.1.2

DATE CVE VULNERABILITY TITLE RISK
2018-02-15 CVE-2016-8528 Permissions, Privileges, and Access Controls vulnerability in Eucalyptus
A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found.
network
low complexity
eucalyptus CWE-264
6.5
2018-02-15 CVE-2016-8520 Permission Issues vulnerability in Eucalyptus
HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs.
network
low complexity
eucalyptus CWE-275
6.5
2016-01-05 CVE-2015-6861 Permissions, Privileges, and Access Controls vulnerability in Eucalyptus
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account.
network
high complexity
eucalyptus CWE-264
4.6