CVE-2021-37036

There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2021-11-23

Last modified

2024-08-04

Weaknesses

CWE-532

Affected products

• Ecns280 Td Firmware (Huawei)
• Fusioncompute (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210818-01-informationleak-en