What is CVE-2017-8192?

CVE-2017-8192 is a high-severity vulnerability in Huawei Fusionsphere Openstack, classified under Incorrect Authorization. CVSS score: 7.8/10. Published 2017-11-22.

How severe is CVE-2017-8192?

High severity. CVSS v3 base score is 7.8 out of 10.

Auth bypass in Huawei Fusionsphere Openstack

CVE-2017-8192

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.

Vulnerability class: Broken Access Control

EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Fusionsphere_openstack — versions v100r006c00
Huawei Technologies Co., Ltd. Fusionsphere Openstack — versions V100R006C00

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-8192?: CVE-2017-8192 is a high-severity vulnerability in Huawei Fusionsphere Openstack, classified under Incorrect Authorization. CVSS score: 7.8/10. Published 2017-11-22.
How severe is CVE-2017-8192?: High severity. CVSS v3 base score is 7.8 out of 10.