Improper Permissions Management in FusionSphere OpenStack by Huawei
CVE-2020-9225

7.8HIGH

Key Information:

Vendor

Huawei
Status
Fusionsphere Openstack
Vendor
CVE Published:
18 June 2020

What is CVE-2020-9225?

FusionSphere OpenStack 6.5.1 contains a vulnerability related to improper permissions management. The flaw arises when the software fails to correctly assign privileges during various actions, potentially allowing unauthorized users to execute operations beyond their assigned rights. This can lead to significant security risks if exploited, as it may permit users to access sensitive functionalities that should be restricted. Users and administrators should review security advisories and apply necessary updates to mitigate this vulnerability.

Affected Version(s)

FusionSphere OpenStack 6.5.1

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.