Authentication flaw

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.

CPENameOperatorVersion
fusionsphere_openstackeq100r6c0spc102nf-v

CPE	Name	Operator	Version
	fusionsphere_openstack	eq	100r6c0spc102nf-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-02-OpenStack-en

www.securityfocus.com/bid/102209