Design/Logic Flaw

Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-6827

Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, enabling remote authenticated users to obtain sensitive information via unspecified vectors. Connected documents confirm the vulnerability originates from plaintext key storage and affects FusionCompute deployments...

CVE-2016-6827

Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

Huawei FusionCompute Information Disclosure Vulnerability

Huawei FusionCompute is an enterprise-grade, open server virtualization solution from Huawei, China, based on the Xen open source design. The solution provides automation, advanced integration and management capabilities for virtualized data centers. An information disclosure vulnerability exists...

Security Advisory - Cleartext Storage of Crytographic Key Vulnerability in FusionCompute

FusionCompute has a key cleartext storage vulnerability. Successful exploit could allow an attacker to obtain AES keys. Vulnerability ID: HWPSIRT-2016-06076 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2016-6827. Huawei has released software updates to fix...

Huawei FusionCompute Denial of Service Vulnerability

Huawei FusionCompute is an enterprise-class open server virtualization solution based on the Xen open source design. A denial of service vulnerability exists in Huawei FusionCompute, which can be exploited by remote attackers to conduct denial of service attacks by sending a large number of packe...

CVE-2016-4057

Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service resource consumption via a large number of crafted packets...

CVE-2016-4057

Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service resource consumption via a large number of crafted packets...

Code injection

Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service resource consumption via a large number of crafted packets...

CVE-2016-4057

Huawei FusionCompute is affected by CVE-2016-4057: a DoS vulnerability in FusionCompute prior to V100R005C10SPC700 allows remote authenticated users to exhaust resources by sending a high volume of crafted packets, causing service disruption. The issue originates from a vulnerability in handling ...

CVE-2016-4057

Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service resource consumption via a large number of crafted packets...

Security Advisory - Data Leak Vulnerability in the FusionCompute

The FusionCompute is a cloud operating system OS. It virtualizes computing, storage, and network resources, and implements centralized management and scheduling of the virtual resources through a unified interface. Huawei FusionCompute has sensitive data leak vulnerability. An attacker can log in...

CVE-2015-8336

Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors...

Code injection

Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors...

CVE-2015-8336

CVE-2015-8336 affects Huawei FusionCompute prior to V100R005C10SPC700. It enables remote authenticated users to obtain sensitive role and permission information via unspecified vectors due to an information disclosure vulnerability. Affected versions: FusionCompute before V100R005C10SPC700. Mitig...

CVE-2015-8336

Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors...

PT-2016-3892 · Huawei · Fusioncompute

Name of the Vulnerable Software and Affected Versions: Huawei FusionCompute versions prior to V100R005C10SPC700 Description: The issue allows remote authenticated users to obtain sensitive role and permission information via unspecified vectors. Recommendations: For versions prior to...

Security Advisory - DoS Vulnerability in FusionCompute

FusionCompute is a cloud OS software for virtualization of hardware resources and central management of virtual, service, and user resources. A DoS vulnerability exists in FusionCompute. An attacker can send abnormal packets as an ordinary user to exhaust system resources and make services...

Huawei FusionCompute Information Disclosure Vulnerability

Huawei FusionCompute is an enterprise-grade open server virtualization solution from Huawei, China, based on the Xen open source design. The solution provides automation, advanced integration and management capabilities for virtualized data centers. A security vulnerability exists in Huawei...

Security Advisory - Information Leak Vulnerability in FusionCompute Products

There is a vulnerability in FusionCompute that enables common users to query unauthorized information. An attacker can exploit this vulnerability to query other users' information, leading to information leaks. Vulnerability ID: HWPSIRT-2015-10048 This vulnerability has been assigned Common...