Security Advisory - Information Leak Vulnerability in Huawei FusionSphere Openstack

2017-10-25T00:00:00
ID HUAWEI-SA-20171025-01-OPENSTACK
Type huawei
Reporter Huawei Technologies
Modified 2017-10-25T00:00:00

Description

There is an information leak vulnerability in Huawei FusionSphere Openstack. Due to an incorrect configuration item, the information transmitted by a transmission channel is not encrypted. An attacker accessing the internal network may obtain sensitive information transmitted. (Vulnerability ID: HWPSIRT-2017-07079) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-8168.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:  http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-openstack-en