Privilege Escalation Vulnerability in Huawei FusionCompute Products
CVE-2020-9222
Summary
A serious privilege escalation issue has been identified within Huawei's FusionCompute product line. This vulnerability arises from inadequate verification measures during the deserialization process of specific files, creating a potential exploit vector for local attackers. If successfully exploited, attackers could manipulate the system to gain elevated permissions, compromising the integrity of the affected environments. Organizations utilizing Huawei FusionCompute should take immediate action to assess their security posture, implement necessary patches, and ensure that systems are fortified against such vulnerabilities. For detailed security advisories and remediation strategies, refer to Huawei's official security advisory.
Affected Version(s)
FusionCompute 6.3.0
FusionCompute 6.3.1
FusionCompute 6.5.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved