CVE-2017-8195

CVE-2017-8195 affects Huawei FusionSphere OpenStack V100R006C00SPC102 (NFV). An improper authentication issue on one port allows an authenticated remote attacker to perform additional operations by sending a crafted REST message, leading to elevated access (confidentiality/integrity/availability ...

Security Advisory - Two Vulnerabilities in The FusionSphere OpenStack

The FusionSphere OpenStack has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands. Vulnerability ID: HWPSIRT-2017-06001 This...