CVE-2017-8188: Improper Neutralization of Special Elements used in a Command

FusionSphere OpenStack V100R006C00SPC102NFVhas a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution...

CVE-2017-8190: Improper Verification of Cryptographic Signature

FusionSphere OpenStack V100R006C00SPC102NFVhas an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software...

PT-2017-18174

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00SPC102NFV and V100R006C10 Description The issue is related to an information leak due to an incorrect configuration item. This results in unencrypted information being transmitted by a transmission...

PT-2017-18198

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to improper authentication on one port, allowing an authenticated, remote attacker to execute more operations by sending a crafted REST message. No informatio...

PT-2017-18196

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00 Description The issue is related to improper authorization, allowing an attacker with low privilege to potentially exploit it and gain operation authority over specific directories, leading to privile...

PT-2017-18194

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to an improper verification of cryptographic signature. Specifically, the software fails to verify the cryptographic signature, which could allow an attacker...

PT-2017-15506

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10RC2 Description The issue is related to command injection vulnerabilities caused by insufficient input validation on a specific port. An attacker can exploit this to gain root...

PT-2017-18141

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack versions V100R006C00 through V100R006C10 Description The issue is related to a command injection vulnerability caused by insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit...

Huawei FusionSphere OpenStack Information Disclosure Vulnerability (CNVD-2017-34417)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere OpenStack suffers from an...

Security Advisory - Information Leak Vulnerability in Huawei FusionSphere OpenStack

Huawei FusionSphere OpenStack has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak. Vulnerability ID: HWPSIRT-2017-07112 This...

Huawei FusionSphere Openstack Information Disclosure Vulnerability (CNVD-2017-33879)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere Openstack suffers from an...

Security Advisory - Information Leak Vulnerability in Huawei FusionSphere Openstack

There is an information leak vulnerability in Huawei FusionSphere Openstack. Due to an incorrect configuration item, the information transmitted by a transmission channel is not encrypted. An attacker accessing the internal network may obtain sensitive information transmitted. Vulnerability ID:...

Security Advisory - Improper Authorization Vulnerability in Huawei FusionSphere OpenStack

There is an improper authorization vulnerability in Huawei FusionSphere OpenStack products. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation. Vulnerability ID:...

Huawei FusionSphere OpenStack Elevation of Privilege Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. An elevation of privilege vulnerability exists in Huaw...

Huawei FusionSphere OpenStack Signature Validation Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A signature validation vulnerability exists in Huawei...

Huawei FusionSphere OpenStack Licensing Issue Vulnerability

Huawei FusionSphere OpenStack is a suite of FusionSphere cloud operating system cloud platform software for ICT scenarios from Huawei, China. An authorization issue vulnerability exists in Huawei FusionSphere OpenStack version V100R006C00, which stems from an unreasonable privilege configuration...

Huawei FusionSphere OpenStack Weak Algorithm Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A weak algorithm vulnerability exists in Huawei...

Huawei FusionSphere OpenStack Path Checksum Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A path checking vulnerability exists in Huawei...

Huawei FusionSphere OpenStack Command Injection Vulnerability (CNVD-2017-30901)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere OpenStack suffers from a command...

Huawei FusionSphere OpenStack Information Disclosure Vulnerability (CNVD-2017-34443)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere OpenStack suffers from an...