CVE Feed

    Dashboard / CVE / CVE-2017-8187

    CVE-2017-8187

    Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation.

    Published:Mar 20, 2018
    Last Modified:Nov 21, 2024
    EPS:Mar 20, 2018
    EPSS Score:0.00085
    CVSS Score:7.2

    Affected Products

    Vendor
    Huawei
    Product
    Fusionsphere Openstack
    Vendor
    Huawei
    Product
    Fusionsphere Openstack Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2020-9079 (CVSS 8.8) — FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a…
    CVE-2020-9225 (CVSS 7.8) — FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not corr…
    CVE-2018-7977 (CVSS 7.5) — There is an information leakage vulnerability on several Huawei products. Due to insufficient communication pr…
    CVE-2017-15321 (CVSS 3.7) — Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of…
    CVE-2017-2719 (CVSS 8.8) — FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities …
    CVE-2017-2720 (CVSS 5.3) — FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cry…
    CVE-2017-8132 (CVSS 8.8) — The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due…
    CVE-2017-8134 (CVSS 8.8) — The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due…
    CVE-2017-8188 (CVSS 7.2) — FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation,…
    CVE-2017-8189 (CVSS 6) — FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path vali…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High