CVE-2016-8280

CVE-2016-8280 is a directory-traversal vulnerability in Huawei eSight prior to V300R003C20SPC005. The flaw allows remote authenticated users to read arbitrary files through unspecified vectors, enabling information leakage. Connected documents confirm affected product (Huawei eSight) and release ...

Security Advisory - Path Traversal Vulnerability in Multiple Huawei Products

Multiple Huawei products have a path traversal vulnerability. Due to the insufficient path validation, an authenticated attacker may exploit this vulnerability to download some files without authorization, causing information leak. Vulnerability ID: HWPSIRT-2016-07025 This vulnerability has been...