CVE-2017-8189

CVE-2017-8189 is a path traversal vulnerability in Huawei FusionSphere OpenStack, affecting FusionSphere OpenStack V100R006C00SPC102 (NFV). Root cause: insufficient path validation. A high-privilege attacker could traverse paths and overwrite/cover files, leading to service disruption (as per Hua...

CVE-2017-2720

FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure...

CVE-2017-2718

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands...

CVE-2017-8195

CVE-2017-8195 affects Huawei FusionSphere OpenStack V100R006C00SPC102 (NFV). An improper authentication issue on one port allows an authenticated remote attacker to perform additional operations by sending a crafted REST message, leading to elevated access (confidentiality/integrity/availability ...

CVE-2017-8188

CVE-2017-8188 affects Huawei FusionSphere/OpenStack (FusionSphere OpenStack V100R006C00SPC102(NFV)). The vulnerability is a command injection caused by insufficient input validation, enabling a high-privilege attacker to inject code and achieve code execution in affected modules. Exploitation det...

CVE-2017-8193

The CVE-2017-8193 issue affects FusionSphere OpenStack (V100R006C00SPC102 NFV). The root cause is insufficient input validation on a single port, allowing an authenticated, local attacker to inject commands and gain root privileges. The vulnerability is confirmed by multiple sources (NVD entry an...

CVE-2017-8193

The FusionSphere OpenStack V100R006C00SPC102NFV has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands...

CVE-2017-8188

FusionSphere OpenStack V100R006C00SPC102NFVhas a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution...

CVE-2017-8192

CVE-2017-8192 affects Huawei FusionSphere OpenStack V100R006C00, with an improper authorization vulnerability where a low-privilege attacker can obtain operation authority for a specific directory, enabling privilege escalation. Root cause: improper authorization configuration. Impact: local priv...

CVE-2017-8194

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

CVE-2017-8192

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation...

CVE-2017-8135

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with...

CVE-2017-8195

The FusionSphere OpenStack V100R006C00SPC102NFV has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message...

CVE-2017-2714

The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerability to execute arbitrary code or cause a denial of service DoS condition in the affected system...

CVE-2017-8131

The CVE-2017-8131 entry applies to FusionSphere OpenStack (software versions V100R006C00/V100R006C10). It describes a command injection vulnerability caused by insufficient input validation on four TCP listening ports, allowing an unauthenticated attacker to execute commands and gain root privile...

CVE-2017-8132

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with...

CVE-2017-8194

CVE-2017-8194 affects FusionSphere OpenStack V100R006C00SPC102 (NFV). An improper authentication on a single port lets an authenticated, remote attacker send a crafted REST message to perform additional operations. The CVE entry includes a high-level impact (partial to high confidentiality/integr...

CVE-2017-2718

CVE-2017-2718 affects Huawei FusionSphere/OpenStack deployments (V100R006C00, V100R006C10RC2). The defect is two command injection vulnerabilities caused by insufficient input validation on a single port, enabling an attacker to obtain root privileges by sending specially crafted messages. Public...

CVE-2017-2719

CVE-2017-2719 concerns Huawei FusionSphere/OpenStack components (V100R006C00 and V100R006C10RC2). The issue is two command-injection vulnerabilities caused by insufficient input validation on a TCP/one port, allowing an attacker to execute malicious commands and potentially gain root privileges b...

PT-2017-18193

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102NFV Description The issue is related to a path traversal vulnerability due to insufficient path validation. An attacker with high privilege may exploit this to overwrite certain files, resulting ...