CVE-2017-8131: Improper Neutralization of Special Elements used in a Command

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with...

PT-2017-15501

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R005C10SPC705 and earlier Description The issue allows an authenticated attacker on the LAN to exploit a buffer overflow, potentially leading to the execution of arbitrary code or a denial of service DoS...

PT-2017-15506

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10RC2 Description The issue is related to command injection vulnerabilities caused by insufficient input validation on a specific port. An attacker can exploit this to gain root...

PT-2017-18197

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to a command injection vulnerability due to insufficient input validation on one port. An authenticated, local attacker may exploit this to gain root privileg...

PT-2017-18199

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to improper authentication on one port, allowing an authenticated, remote attacker to execute more operations by sending a crafted REST message. Recommendatio...

CVE-2017-8188: Improper Neutralization of Special Elements used in a Command

FusionSphere OpenStack V100R006C00SPC102NFVhas a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution...

PT-2017-18174

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00SPC102NFV and V100R006C10 Description The issue is related to an information leak due to an incorrect configuration item. This results in unencrypted information being transmitted by a transmission...

CVE-2017-8190: Improper Verification of Cryptographic Signature

FusionSphere OpenStack V100R006C00SPC102NFVhas an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software...

PT-2017-18196

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00 Description The issue is related to improper authorization, allowing an attacker with low privilege to potentially exploit it and gain operation authority over specific directories, leading to privile...

PT-2017-18194

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to an improper verification of cryptographic signature. Specifically, the software fails to verify the cryptographic signature, which could allow an attacker...

CVE-2017-8134: Improper Neutralization of Special Elements used in a Command

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with...

PT-2017-18141

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10 Description The issue is related to a command injection vulnerability caused by insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit...

PT-2017-18143

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10 Description The issue is related to a command injection vulnerability caused by insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit...

CVE-2017-8193: Improper Neutralization of Special Elements used in a Command

The FusionSphere OpenStack V100R006C00SPC102NFV has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands...

CVE-2017-2718: Improper Neutralization of Special Elements used in a Command

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands...

Huawei FusionSphere Openstack Information Disclosure Vulnerability (CNVD-2017-33879)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere Openstack suffers from an...

Huawei FusionSphere OpenStack Elevation of Privilege Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. An elevation of privilege vulnerability exists in Huaw...

Huawei FusionSphere OpenStack Weak Algorithm Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A weak algorithm vulnerability exists in Huawei...

Huawei FusionSphere OpenStack Path Checksum Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A path checking vulnerability exists in Huawei...

Huawei FusionSphere OpenStack Signature Validation Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A signature validation vulnerability exists in Huawei...