Weak Cryptographic Algorithm in FusionSphere OpenStack by Huawei
CVE-2017-8191

5.9MEDIUM

Key Information:

Vendor
McAfee
Status
Fusionsphere Openstack
Vendor
CVE Published:
22 November 2017

Summary

The FusionSphere OpenStack V100R006C00SPC102 is affected by a weak cryptographic algorithm that allows attackers to exploit the vulnerability, potentially enabling them to crack encrypted data, thereby exposing confidential information transmitted over the network. This issue can lead to significant data leaks, highlighting the importance of employing robust cryptographic standards in software design.

Affected Version(s)

FusionSphere OpenStack V100R006C00SPC102(NFV)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/102282
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.