PT-2020-20542 · Huawei · Fusioncompute

Published 2020-08-21 · Updated 2021-07-21 · CVE-2020-9246

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FusionCompute version 8.0.0

Description The issue is related to an information leak. A module in the software does not implement strict access control and information protection, allowing attackers with low privilege to obtain extra information, which can lead to an information leak.

Recommendations For FusionCompute version 8.0.0, consider restricting access to the vulnerable module to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-9246

Affected Products

Fusioncompute

References · 3

• https://osv.dev/vulnerability/CVE-2020-9246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9246 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-fc-en · Vendor Advisory