CVE-2017-17323

Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.

Score

CVSS 3.0 4.3 Medium

Status

Modified - psirt@huawei.com

Published

2018-03-09

Last modified

2024-08-05

Weaknesses

CWE-285, CWE-863

Affected products

• Ibmc Firmware (Huawei)
• Ibmc (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en