FusionSphere OpenStack V100R006C00SPC102 (NFV) vulnerabilities

FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.