PT-2017-18199

CVE-2017-8195

·

Published

2017-11-22

·

Updated

2017-12-08

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version V100R006C00SPC102(NFV)
Description The issue is related to improper authentication on one port, allowing an authenticated, remote attacker to execute more operations by sending a crafted REST message.
Recommendations For version V100R006C00SPC102(NFV), ensure proper authentication mechanisms are in place for the affected port to prevent unauthorized access. As a temporary workaround, consider restricting access to the vulnerable port until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾