CVE-2017-8187 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2017-8187

Analyzed

More Info Official Page

Source-psirt@huawei.com

Published At-20 Mar, 2018 | 15:29

Updated At-03 Oct, 2019 | 00:03

Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.2	HIGH	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

Huawei Technologies Co., Ltd.

>>fusionsphere_openstack_firmware>>v100r006c00spc102\(nfv\)

cpe:2.3:o:huawei:fusionsphere_openstack_firmware:v100r006c00spc102\(nfv\):*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>fusionsphere_openstack>>-

cpe:2.3:h:huawei:fusionsphere_openstack:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-269	Primary	nvd@nist.gov

CWE ID: CWE-269

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en	psirt@huawei.com	Vendor Advisory

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en

Source: psirt@huawei.com

Resource:

Vendor Advisory