CVE-2017-8196

FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable.

Score

CVSS 3.0 4.2 Medium

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-863

Affected products

• Fusionsphere (Huawei)
• Fusionsphere (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en