high7.5
CVE-2015-6861
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by l…
Impact
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eucalyptus | Eucalyptus | Versions 3.4.0, 3.4.1, 3.4.2, 3.4.3, 4.0.0, 4.0.1 |