CVE-2021-22397

Name of the Vulnerable Software and Affected Versions Huawei ManageOne version 8.0.0

Description The issue is related to insufficient input validation, which can be exploited to escalate privileges using specially crafted files. Attackers can exploit this by performing specific files, leading to a privilege escalation attack that can compromise normal service.

Recommendations For Huawei ManageOne version 8.0.0, consider restricting access to external parameters of files to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using files with unverified external parameters to prevent privilege escalation attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.