CVE-2015-2253

Huawei OceanStor UDS XML interface information-disclosure vulnerability (CVE-2015-2253) affects UDS software prior to V100R002C01SPC102. A remote-authenticated user can trigger crafted XML to obtain sensitive files. CNVD and CNVD-2017-22534 confirm affected versions up to V100R002C01SPC101 and ea...

CVE-2015-2253

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...