CVE-2015-6861

Published: Jan 5, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account.

Affected (11)

Products: Eucalyptus: Eucalyptus

Eucalyptus

1 product

Eucalyptus

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Eucalyptus Eucalyptus	Version 3.4.0
Eucalyptus Eucalyptus	Version 3.4.1
Eucalyptus Eucalyptus	Version 3.4.2
Eucalyptus Eucalyptus	Version 3.4.3
Eucalyptus Eucalyptus	Version 4.0.0
Eucalyptus Eucalyptus	Version 4.0.1
Eucalyptus Eucalyptus	Version 4.0.2
Eucalyptus Eucalyptus	Version 4.1.0
Eucalyptus Eucalyptus	Version 4.1.1
Eucalyptus Eucalyptus	Version 4.1.2
Eucalyptus Eucalyptus	Version 4.2.0

Related CWEs

CWE-264

References (4)

http://www.securityfocus.com/bid/79650

Source: cve@mitre.org

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926482

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/79650

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926482

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.