PT-2017-18199
CVE-2017-8195
·
Publicado
2017-11-22
·
Atualizado
2017-12-08
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FusionSphere OpenStack version V100R006C00SPC102(NFV)
Description
The issue is related to improper authentication on one port, allowing an authenticated, remote attacker to execute more operations by sending a crafted REST message.
Recommendations
For version V100R006C00SPC102(NFV), ensure proper authentication mechanisms are in place for the affected port to prevent unauthorized access. As a temporary workaround, consider restricting access to the vulnerable port until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾