Privilege escalation

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software.

CPENameOperatorVersion
fusionsphere_openstackeq100r6c0spc102nf-v

CPE	Name	Operator	Version
	fusionsphere_openstack	eq	100r6c0spc102nf-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en