CVE-2017-8194
HighSummary
FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.
Risk Assessment
This vulnerability may allow an attacker to remotely execute unauthorized operations, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update FusionSphere OpenStack to the latest version to mitigate this vulnerability and to review and strengthen authentication mechanisms.
Other vulnerabilities in FusionSphere OpenStack V100R006C00SPC102 (NFV)
See all- CVE-2017-8195High
FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.
- CVE-2017-8193High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.
- CVE-2017-8188High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
Original NVD description (English source)
The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.