PT-2018-8449 · Huawei · Huawei Fusionsphere Openstack

Published 2018-03-20 · Updated 2019-10-03 · CVE-2017-8187

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei FusionSphere OpenStack version V100R006C00SPC102(NFV)

Description The issue is related to improper privilege restrictions, allowing an attacker with high privilege to obtain other users' certificates, which may lead to privilege escalation.

Recommendations For version V100R006C00SPC102(NFV), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-8187

Affected Products

Huawei Fusionsphere Openstack

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-8187 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8187 · Vendor Advisory