CVE-2017-17323

4.3MEDIUM

Key Information:

Vendor
McAfee
Status
IBMc
Vendor
CVE Published:
9 March 2018

Summary

Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.

Affected Version(s)

iBMC V200R002C10

iBMC V200R002C20

iBMC V200R002C30

References

http://www.huawei.com/en/psirt/security-advisories/2018/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.