PT-2016-6656 · Huawei · Oceanstor

Published 2016-06-24 · Updated 2016-09-29 · CVE-2016-5722

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei OceanStor versions prior to V300R003C10

Description The issue allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network, as the plaintext session token is sent in the HTTP header.

Recommendations For versions prior to V300R003C10, update to V300R003C10 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5722

Affected Products

Oceanstor

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-oceanstor-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5722 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5722 · Vendor Advisory