Privilege escalation

Huawei FusionSphere OpenStack V100R006C00SPC102NFV has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation...

CVE-2017-8187

Huawei FusionSphere OpenStack V100R006C00SPC102NFV has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation...

CVE-2017-8187

CVE-2017-8187 affects Huawei FusionSphere OpenStack V100R006C00SPC102 (NFV). The root cause is improper privilege restrictions that could allow a high-privileged attacker to obtain other users’ certificates, enabling privilege escalation. The NVD reports a base CVSSv3 score of 7.2 (HIGH) with net...

CVE-2017-8187

Huawei FusionSphere OpenStack V100R006C00SPC102NFV has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation...

CVE-2017-8187: Improper Privilege Management

Huawei FusionSphere OpenStack V100R006C00SPC102NFV has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation...

PT-2018-8449

Name of the Vulnerable Software and Affected Versions Huawei FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to improper privilege restrictions, allowing an attacker with high privilege to obtain other users' certificates, which may lead to privilege escalatio...

CVE-2017-15321

Huawei FusionSphere OpenStack V100R006C000SPC102 NFV has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak...

CVE-2017-15321

Huawei FusionSphere OpenStack V100R006C000SPC102 NFV has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak...

Design/Logic Flaw

Huawei FusionSphere OpenStack V100R006C000SPC102 NFV has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak...

CVE-2017-15321

Huawei FusionSphere OpenStack (FSO) on V100R006C000SPC102 (NFV) is affected by an information disclosure vulnerability caused by the default use of a low-version transport protocol, allowing an attacker to intercept transmitted packets. The CVE entry CVE-2017-15321 is documented with an impact of...

CVE-2017-15321

Huawei FusionSphere OpenStack V100R006C000SPC102 NFV has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak...

CVE-2017-15321: Exposure of Sensitive Information to an Unauthorized Actor

Huawei FusionSphere OpenStack V100R006C000SPC102 NFV has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak...

PT-2017-13998

Name of the Vulnerable Software and Affected Versions Huawei FusionSphere OpenStack version V100R006C000SPC102 NFV Description The issue is caused by the use of a low-version transmission protocol by default, which could allow an attacker to intercept packets transferred by a target device,...

Huawei FusionSphere OpenStack GaussDB Buffer Overflow Vulnerability

Huawei FusionSphere OpenStack is a suite of cloud platform software for Huawei's FusionSphere cloud operating system in ICT scenarios.GaussDB is one of the databases. A buffer overflow vulnerability exists in GaussDB in Huawei FusionSphere OpenStack V100R005C10SPC705 and earlier versions. An...

CVE-2017-8198

FusionSphere V100R006C00SPC102NFV has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL...

CVE-2017-8192

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation...

CVE-2017-8188

FusionSphere OpenStack V100R006C00SPC102NFVhas a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution...

CVE-2017-8189

FusionSphere OpenStack V100R006C00SPC102NFVhas a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal...

CVE-2017-8192

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation...

CVE-2017-8193

The FusionSphere OpenStack V100R006C00SPC102NFV has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands...