Privilege Escalation Vulnerability in Huawei FusionSphere OpenStack Products
CVE-2017-8187

7.2HIGH

Key Information:

Vendor
McAfee
Status
Fusionsphere Openstack
Vendor
CVE Published:
20 March 2018

Summary

Huawei FusionSphere OpenStack V100R006C00SPC102 exhibits a vulnerability that allows an attacker with elevated privileges to bypass security measures. This exploitation could enable the unauthorized retrieval of other users' certificates, leading to further escalation of privileges within the system. The flaw arises from inadequate restrictions on user privileges, emphasizing the need for immediate remedial action to secure affected installations and protect sensitive data.

Affected Version(s)

FusionSphere OpenStack V100R006C00SPC102(NFV)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.