CVE-2021-37036

Name of the Vulnerable Software and Affected Versions FusionCompute version 6.5.1 eCNS280 TD versions V100R005C00 through V100R005C10

Description The issue is related to improper storage of specific information in log files. When a user logs in to the device, an attacker can obtain this information, potentially leading to information leakage. This occurs due to a flaw in how certain data is handled during the login process.

Recommendations For FusionCompute version 6.5.1, update the logging mechanism to properly secure sensitive information. For eCNS280 TD versions V100R005C00 through V100R005C10, modify the log file storage to prevent unauthorized access to sensitive data.