PT-2017-18174

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00SPC102NFV and V100R006C10 Description The issue is related to an information leak due to an incorrect configuration item. This results in unencrypted information being transmitted by a transmission...

CVE-2017-8195: Improper Authentication

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

PT-2017-18199

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to improper authentication on one port, allowing an authenticated, remote attacker to execute more operations by sending a crafted REST message. Recommendatio...

CVE-2017-8132: Improper Neutralization of Special Elements used in a Command

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with...

PT-2017-18197

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to a command injection vulnerability due to insufficient input validation on one port. An authenticated, local attacker may exploit this to gain root privileg...

PT-2017-18144

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10 Description The issue is related to a command injection vulnerability caused by insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit...

PT-2017-18140

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10 Description The issue is related to a command injection vulnerability caused by insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit...

CVE-2017-2718: Improper Neutralization of Special Elements used in a Command

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands...

CVE-2017-2720: Use of Hard-coded Credentials

FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure...

CVE-2017-2719: Improper Neutralization of Special Elements used in a Command

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands...

CVE-2017-8131: Improper Neutralization of Special Elements used in a Command

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with...

PT-2017-15506

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10RC2 Description The issue is related to command injection vulnerabilities caused by insufficient input validation on a specific port. An attacker can exploit this to gain root...

PT-2017-18143

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10 Description The issue is related to a command injection vulnerability caused by insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit...

CVE-2017-8194: Improper Authentication

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

PT-2017-18196

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00 Description The issue is related to improper authorization, allowing an attacker with low privilege to potentially exploit it and gain operation authority over specific directories, leading to privile...

CVE-2017-8192: Incorrect Authorization

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation...

PT-2017-15501

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R005C10SPC705 and earlier Description The issue allows an authenticated attacker on the LAN to exploit a buffer overflow, potentially leading to the execution of arbitrary code or a denial of service DoS...

CVE-2017-8191: Use of a Broken or Risky Cryptographic Algorithm

FusionSphere OpenStack V100R006C00SPC102NFVhas a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links...

PT-2017-15505

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10RC2 Description The issue is related to command injection vulnerabilities due to insufficient input validation on one port. An attacker can exploit these vulnerabilities to gain ro...

CVE-2017-8189: Improper Limitation of a Pathname to a Restricted Directory

FusionSphere OpenStack V100R006C00SPC102NFVhas a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal...