CVE-2020-9079
Published Aug 11, 2020FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a way to exploit the v…
Vendor/product archive
huawei / fusionsphere_openstack CVEs
Beta · best-effort22 CVEs tagged to huawei / fusionsphere_openstack — 0 Critical, 16 High, 5 Medium, 1 Low, 0 Unrated.
CVE-2020-9225
Published Jun 18, 2020FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assignment when an actor attempts to perfor…
CVE-2018-7977
Published Nov 27, 2018There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unauthorized attacker can e…
CVE-2017-8187
Published Mar 20, 2018Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain t…
CVE-2017-15321
Published Dec 22, 2017Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could in…
CVE-2017-8195
Published Nov 22, 2017The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may e…
CVE-2017-8194
Published Nov 22, 2017The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may e…
CVE-2017-8193
Published Nov 22, 2017The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may…
CVE-2017-8192
Published Nov 22, 2017FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obt…
CVE-2017-8191
Published Nov 22, 2017FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause informati…
CVE-2017-8190
Published Nov 22, 2017FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An at…
CVE-2017-8189
Published Nov 22, 2017FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerabilit…
CVE-2017-8188
Published Nov 22, 2017FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some…
CVE-2017-8168
Published Nov 22, 2017FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item, the information transmi…
CVE-2017-8135
Published Nov 22, 2017The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An…
CVE-2017-8134
Published Nov 22, 2017The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An…
CVE-2017-8132
Published Nov 22, 2017The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An…
CVE-2017-8131
Published Nov 22, 2017The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An…
CVE-2017-2720
Published Nov 22, 2017FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which…
CVE-2017-2719
Published Nov 22, 2017FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can…
CVE-2017-2718
Published Nov 22, 2017FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can…
CVE-2017-2714
Published Nov 22, 2017The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerabili…
Showing 1-22 of 22 CVEsPage 1 of 1