Path Traversal Vulnerability in FusionSphere OpenStack by Huawei
CVE-2017-8189

6MEDIUM

Key Information:

Vendor
McAfee
Status
Fusionsphere Openstack
Vendor
CVE Published:
22 November 2017

Summary

The FusionSphere OpenStack product by Huawei is vulnerable to a path traversal issue that arises from inadequate path validation. This vulnerability allows an attacker with elevated privileges to manipulate files within the system, potentially leading to abnormal service behavior and disruptions. Proper security measures and updates are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

FusionSphere OpenStack V100R006C00SPC102(NFV)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.