Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HPE Helion Eucalyptus 权限许可和访问控制漏洞
Vulnerability Description
HPE Helion Eucalyptus是美国惠普企业（Hewlett Packard Enterprise，HPE）公司的一套开源的用于构建兼容亚马逊网络服务（AWS）的私有云解决方案。 HPE Helion Eucalyptus 3.4.0版本至4.2.0版本中存在安全漏洞。远程攻击者可借助用户账户的策略设置利用该漏洞绕过既定的AssumeRole权限要求，并假定IAM角色。
CVSS Information
N/A
Vulnerability Type
N/A