PT-2016-6656 · Huawei · Oceanstor

Publicado 2016-06-24 · Atualizado 2016-09-29 · CVE-2016-5722

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei OceanStor versions prior to V300R003C10

Description The issue allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network, as the plaintext session token is sent in the HTTP header.

Recommendations For versions prior to V300R003C10, update to V300R003C10 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-5722

Produtos afetados

Oceanstor

Referências · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-oceanstor-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5722 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5722 · Aviso do Fabricante