Security Advisory - XSS Vulnerability in Huawei Public Cloud Solution

The Public Cloud Solution has a Cross-Site Scripting (XSS) vulnerability in volume backup service module. An attacker can insert special characters to modify server data. (Vulnerability ID: HWPSIRT-2016-06017)

_ _

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-5850.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:

<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-01-publiccloud-en&gt;