CVE-2017-2720

The CVE-2017-2720 issue affects Huawei FusionSphere OpenStack V100R006C00, where an information-exposure vulnerability stems from a hard-coded cryptographic key used to encrypt inter-component messages. This design flaw can increase the risk of encrypted data being recovered. Huawei’s Security Ad...

CVE-2017-2718

CVE-2017-2718 affects Huawei FusionSphere/OpenStack deployments (V100R006C00, V100R006C10RC2). The defect is two command injection vulnerabilities caused by insufficient input validation on a single port, enabling an attacker to obtain root privileges by sending specially crafted messages. Public...

CVE-2017-2719

CVE-2017-2719 concerns Huawei FusionSphere/OpenStack components (V100R006C00 and V100R006C10RC2). The issue is two command-injection vulnerabilities caused by insufficient input validation on a TCP/one port, allowing an attacker to execute malicious commands and potentially gain root privileges b...

CVE-2017-8134

The CVE-2017-8134 entry concerns Huawei FusionSphere OpenStack (software versions V100R006C00 and V100R006C10) with four TCP listening ports vulnerable to command injection caused by insufficient input validation. The vulnerability allows an unauthenticated attacker to execute malicious commands ...

CVE-2017-8132

CVE-2017-8132 affects Huawei FusionSphere OpenStack (software versions V100R006C00 and V100R006C10). The vulnerability is a command injection due to insufficient input validation on four TCP listening ports, allowing an unauthenticated attacker to gain root privileges by sending malicious command...

CVE-2017-8135

CVE-2017-8135 affects Huawei FusionSphere/OpenStack (V100R006C00/C10). The root cause is insufficient input validation on four TCP listening ports, enabling an unauthenticated attacker to inject commands and gain root privileges. The vulnerability is documented across multiple sources (NVD, CVE l...

CVE-2017-8192

CVE-2017-8192 affects Huawei FusionSphere OpenStack V100R006C00, with an improper authorization vulnerability where a low-privilege attacker can obtain operation authority for a specific directory, enabling privilege escalation. Root cause: improper authorization configuration. Impact: local priv...

CVE-2017-8131

The CVE-2017-8131 entry applies to FusionSphere OpenStack (software versions V100R006C00/V100R006C10). It describes a command injection vulnerability caused by insufficient input validation on four TCP listening ports, allowing an unauthenticated attacker to execute commands and gain root privile...