EUVD-2016-7989

Malware in sbrugna...

PT-2016-7220

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 Description The issue allows remote attackers to execute arbitrary commands via special characters. Recommendations For versions prior to V200R001C00SPC200, update to...

CVE-2016-7107: Improper Access Control

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors...

PT-2016-7219

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 SPH206 Description The issue allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords. Recommendations For versions prior to V200R001C00SPC2...

PT-2016-7218

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 SPH206 Description The issue allows remote attackers to reset arbitrary user passwords, which can affect system data integrity. The exact vectors used for the attack are...

PT-2016-7221

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by utilizing "special characters" in an attack. Recommendations For versions...

CVE-2016-7110: Improper Control of Generation of Code

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109...

CVE-2016-7109: Improper Control of Generation of Code

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110...

CVE-2016-7108: Exposure of Sensitive Information to an Unauthorized Actor

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors...

Huawei UMA suffers from command line injection vulnerability (CNVD-2016-06968)

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal, controls and records O&M operations performed by users, and supports auditing by command view and video playback. A command execution vulnerability exists in Huawei UMA. As the system does...