EUVD-2016-7989

Malware in sbrugna...

Huawei UMA Product Information Disclosure Vulnerability

Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA products have information leakage vulnerabilities, which can be exploite...

Huawei UMA Product Elevation of Privilege Vulnerability (CNVD-2017-12932)

Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. An elevation of privilege vulnerability exists in the Huawei UMA product. Due to...

CVE-2016-7108

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors...

PT-2016-7218

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 SPH206 Description The issue allows remote attackers to reset arbitrary user passwords, which can affect system data integrity. The exact vectors used for the attack are...

PT-2016-7219

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 SPH206 Description The issue allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords. Recommendations For versions prior to V200R001C00SPC2...

PT-2016-7220

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 Description The issue allows remote attackers to execute arbitrary commands via special characters. Recommendations For versions prior to V200R001C00SPC200, update to...

PT-2016-7221

Name of the Vulnerable Software and Affected Versions Huawei Unified Maintenance Audit UMA versions prior to V200R001C00SPC200 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by utilizing "special characters" in an attack. Recommendations For versions...

CVE-2016-7110: Improper Control of Generation of Code

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109...

CVE-2016-7107: Improper Access Control

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors...

CVE-2016-7108: Exposure of Sensitive Information to an Unauthorized Actor

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors...

CVE-2016-7109: Improper Control of Generation of Code

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110...

Huawei UMA suffers from command line injection vulnerability (CNVD-2016-06968)

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal, controls and records O&M operations performed by users, and supports auditing by command view and video playback. A command execution vulnerability exists in Huawei UMA. As the system does...

Command Execution Vulnerability in Huawei UMA

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal, controls and records O&M operations performed by users, and supports auditing by command view and video playback. A command execution vulnerability exists in Huawei UMA. As the system does...

Huawei UMA Security Bypass Vulnerability

Huawei UMA Unified Maintenance and Audit is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA suffers from a security bypass vulnerability, as the program fails t...