CVE-2016-8520

HIGH · CVSS 8.8 EPSS 1.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-02-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-8520

Severity

HIGH

CVSS

8.8

EPSS

1.36%

Original NVD Description

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data.