There is an information leak vulnerability in Huawei FusionSphere Openstack. Due to an incorrect configuration item, the information transmitted by a transmission channel is not encrypted. An attacker accessing the internal network may obtain sensitive information transmitted. (Vulnerability ID: HWPSIRT-2017-07079) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-8168.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-openstack-en