CVE-2017-8195
HighSummary
FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.
Risk Assessment
This vulnerability may lead to unauthorized access to the system, posing a serious threat to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update FusionSphere OpenStack to the latest version to mitigate this vulnerability and implement additional security measures to monitor and restrict access to critical ports.
Other vulnerabilities in FusionSphere OpenStack V100R006C00SPC102(NFV)
See all- CVE-2017-8194High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.
- CVE-2017-8193High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.
- CVE-2017-8188High
FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
Original NVD description (English source)
The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.