Improper Permissions Management in FusionSphere OpenStack by Huawei
CVE-2020-9225
7.8HIGH
Summary
FusionSphere OpenStack 6.5.1 contains a vulnerability related to improper permissions management. The flaw arises when the software fails to correctly assign privileges during various actions, potentially allowing unauthorized users to execute operations beyond their assigned rights. This can lead to significant security risks if exploited, as it may permit users to access sensitive functionalities that should be restricted. Users and administrators should review security advisories and apply necessary updates to mitigate this vulnerability.
Affected Version(s)
FusionSphere OpenStack 6.5.1
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved