CVE-2017-15321

CWE-200 — Information Exposure3 documents3 sources

Severity

3.7LOW

EPSS

0.1%

top 70.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Technologies Co., Ltd. Fusionsphere Openstack Huawei Fusionsphere Openstack

Timeline

PublishedDec 22

Latest updateMay 14

Description

Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

▶NVDhuawei/fusionsphere_openstackv100r006c000spc102_\(nfv\)

▶CVEListV5huawei_technologies_co.,_ltd./fusionsphere_openstackV100R006C000SPC102 (NFV)

🔴Vulnerability Details

GHSA

GHSA-wj5v-7qmm-hqcg: Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by↗2022-05-14

▶

CVEList

CVE-2017-15321: Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by↗2017-12-22

▶