CVE-2017-8189

CWE-22 — Path Traversal3 documents3 sources

Severity

6.0MEDIUM

EPSS

0.0%

top 92.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Technologies Co., Ltd. Fusionsphere Openstack Huawei Fusionsphere Openstack

Timeline

PublishedNov 22

Latest updateMay 17

Description

FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HExploitability: 0.8 | Impact: 5.2

Affected Packages2 packages

▶NVDhuawei/fusionsphere_openstackv100r006c00spc102\(nfv\)

▶CVEListV5huawei_technologies_co.,_ltd./fusionsphere_openstackV100R006C00SPC102(NFV)

🔴Vulnerability Details

GHSA

GHSA-2r4j-j57m-5qmc: FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability↗2022-05-17

▶

CVEList

CVE-2017-8189: FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability↗2017-11-22

▶