Vulnerabilities

TI-2020-07292 CVE-2020-9079 · GHSA-qj8p-w7h4-v2qg

FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability.

LOW 38

FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00374 Published 2020-08-11 No fix listed

TI-2020-07369 CVE-2020-9225 · GHSA-vpqm-qcm6-93g3

Improper privilege management in FusionSphere OpenStack

LOW 33

FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2020-06-18 No fix listed CWE-269

TI-2018-05763 CVE-2018-7977 · GHSA-47cx-x7mm-vj6c

Information disclosure in Huawei FusionSphere OpenStack

LOW 35

There is an information leakage vulnerability on several Huawei products.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00976 Published 2018-11-27 No fix listed CWE-200

TI-2017-11234 CVE-2017-15321 · GHSA-wj5v-7qmm-hqcg

Information disclosure in Huawei FusionSphere OpenStack

LOW 19

Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default.

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.00606 Published 2017-12-22 No fix listed CWE-200

TI-2017-05770 CVE-2017-8195 · GHSA-6h4q-p2hp-mmhq

Improper authentication in Huawei FusionSphere OpenStack

MEDIUM 40

The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01173 Published 2017-11-22 No fix listed CWE-287

TI-2017-05769 CVE-2017-8194 · GHSA-6382-9wrq-f6w4

Improper authentication in Huawei FusionSphere OpenStack

MEDIUM 40

The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01209 Published 2017-11-22 No fix listed CWE-287

TI-2017-05768 CVE-2017-8193 · GHSA-54gh-5r45-9v33

Command injection in Huawei FusionSphere OpenStack

LOW 36

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00865 Published 2017-11-22 No fix listed CWE-77

TI-2017-05767 CVE-2017-8192 · GHSA-hjqc-wrmr-hq47

Incorrect authorization in Huawei FusionSphere OpenStack

LOW 33

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2017-11-22 No fix listed CWE-863

TI-2017-05766 CVE-2017-8191 · GHSA-gpqc-rg6h-mqq7

Broken or risky cryptographic algorithm in Huawei FusionSphere OpenStack

LOW 27

FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00597 Published 2017-11-22 No fix listed CWE-327

TI-2017-05765 CVE-2017-8190 · GHSA-wgjg-8jrw-h95f

Improper signature verification in Huawei FusionSphere OpenStack

LOW 29

FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.0019 Published 2017-11-22 No fix listed CWE-347

TI-2017-05764 CVE-2017-8189 · GHSA-2r4j-j57m-5qmc

Path traversal in Huawei FusionSphere OpenStack

LOW 27

FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability.

CVSS 3.0MEDIUM 6.0 Local High privileges No interaction EPSS 0.0028 Published 2017-11-22 No fix listed CWE-22

TI-2017-05763 CVE-2017-8188 · GHSA-q8h6-q93m-28h6

Command injection in Huawei FusionSphere OpenStack

LOW 35

FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01681 Published 2017-11-22 No fix listed CWE-77

TI-2017-05743 CVE-2017-8168 · GHSA-5v8g-6r7r-jcwq

FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an…

LOW 20

FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability.

CVSS 3.0MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00266 Published 2017-11-22 No fix listed CWE-311

TI-2017-05710 CVE-2017-8135 · GHSA-fx8w-7fwc-6r2c

Command injection in Huawei FusionSphere OpenStack

MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01423 Published 2017-11-22 No fix listed CWE-77

TI-2017-05709 CVE-2017-8134 · GHSA-37fm-24w3-h7fh

Command injection in Huawei FusionSphere OpenStack

MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01366 Published 2017-11-22 No fix listed CWE-77

TI-2017-05707 CVE-2017-8132 · GHSA-r7gj-ggxh-qx78

Command injection in Huawei FusionSphere OpenStack

MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01366 Published 2017-11-22 No fix listed CWE-77

TI-2017-05706 CVE-2017-8131 · GHSA-hj55-5hx3-fvj5

Command injection in Huawei FusionSphere OpenStack

MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01366 Published 2017-11-22 No fix listed CWE-77

TI-2017-01962 CVE-2017-2720 · GHSA-r9xf-wjgv-hmjp

Hard-coded credentials in Huawei FusionSphere OpenStack

LOW 25

FusionSphere OpenStack V100R006C00 has an information exposure vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0071 Published 2017-11-22 No fix listed CWE-798

TI-2017-01961 CVE-2017-2719 · GHSA-j4p9-45hp-4p8p

Command injection in Huawei FusionSphere OpenStack

MEDIUM 40

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00923 Published 2017-11-22 No fix listed CWE-77

TI-2017-01960 CVE-2017-2718 · GHSA-f558-4253-rc39

Command injection in Huawei FusionSphere OpenStack

MEDIUM 40

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00907 Published 2017-11-22 No fix listed CWE-77

TI-2017-01956 CVE-2017-2714 · GHSA-734h-9hhw-9mwm

Memory corruption in Huawei FusionSphere OpenStack

LOW 35

The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00515 Published 2017-11-22 No fix listed CWE-119

Vulnerabilities

Filters