CVE-2016-8779

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol (LDAP) operation command into a specific input variable to obtain sensitive information from the database.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2017-04-02

Last modified

2024-08-06

Affected products

• Fusionaccess (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-ldap-en
• http://www.securityfocus.com/bid/94620