Command injection

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.

CPENameOperatorVersion
fusionsphere_openstackeq100r6c0spc102nf-v

CPE	Name	Operator	Version
	fusionsphere_openstack	eq	100r6c0spc102nf-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en