Information Leak in Huawei FusionSphere OpenStack Implementation
CVE-2017-15321

3.7LOW

Key Information:

Vendor

McAfee
Status
Fusionsphere Openstack
Vendor
CVE Published:
8 November 2017

What is CVE-2017-15321?

Huawei FusionSphere OpenStack V100R006C000SPC102 has a vulnerability that allows for information leakage due to the usage of a low version transmission protocol as default. This flaw makes it feasible for an attacker to intercept data packets being sent from a target device, leading to the potential exposure of sensitive information.

Affected Version(s)

FusionSphere OpenStack V100R006C000SPC102 (NFV)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.