Logic Vulnerability in Huawei Gauss100 OLTP Product
CVE-2021-22298

6.5MEDIUM

Key Information:

Vendor

Huawei
Status
Manageone
Vendor
CVE Published:
6 February 2021

What is CVE-2021-22298?

A logic vulnerability exists in the Huawei Gauss100 OLTP Product, allowing an attacker with specific permissions to exploit the system through crafted SQL statements. This exposure arises from inadequate security measures, potentially leading to abnormal service behavior. Update your systems promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

ManageOne 6.5.1.1.B020,6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.