PT-2016-3892 · Huawei · Fusioncompute

Published 2016-04-14 · Updated 2025-01-15 · CVE-2015-8336

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei FusionCompute versions prior to V100R005C10SPC700

Description The issue allows remote authenticated users to obtain sensitive role and permission information via unspecified vectors.

Recommendations For versions prior to V100R005C10SPC700, update to V100R005C10SPC700 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-264

CWE-200

Related Identifiers

CVE-2015-8336

Affected Products

Fusioncompute

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-8336 · Security Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462904.htm · Vendor Advisory
• https://t.me/cvenotify/107461 · Telegram Post