Huawei Technologies Co., Ltd. Fusionsphere OpenStack
20 CVEs affecting Huawei Technologies Co., Ltd. Fusionsphere OpenStack. Latest disclosed: 2018-11-27. Critical: 0, High: 14.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8195 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, r… |
CVE-2017-8194 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, r… |
CVE-2017-8135 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8134 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8132 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8131 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-2719 | High | 8.8 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one p… |
CVE-2017-2718 | High | 8.8 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one p… |
CVE-2017-8193 | High | 8.0 | 2017-11-22 | The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated… |
CVE-2017-2714 | High | 8.0 | 2017-11-22 | The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can expl… |
CVE-2017-8192 | High | 7.8 | 2017-11-22 | FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this… |
CVE-2018-7977 | High | 7.5 | 2018-11-27 | There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unautho… |
CVE-2017-8187 | High | 7.2 | 2018-03-20 | Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high pr… |
CVE-2017-8188 | High | 7.2 | 2017-11-22 | FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malic… |
CVE-2017-8190 | Medium | 6.7 | 2017-11-22 | FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptograp… |
CVE-2017-8189 | Medium | 6.0 | 2017-11-22 | FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may explo… |
CVE-2017-8191 | Medium | 5.9 | 2017-11-22 | FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text… |
CVE-2017-2720 | Medium | 5.3 | 2017-11-22 | FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certai… |
CVE-2017-8168 | Medium | 4.3 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item, the… |
CVE-2017-15321 | Low | 3.7 | 2017-12-22 | Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default… |