CVE-2017-8168
First published: Wed Nov 22 2017(Updated: )
FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item, the information transmitted by a transmission channel is not encrypted. An attacker accessing the internal network may obtain sensitive information transmitted.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Fusionsphere Openstack Firmware | =v100r006c00spc102\(nfv\) | |
| Huawei Fusionsphere Openstack Firmware | =v100r006c10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-8168?
CVE-2017-8168 is an information leak vulnerability in FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10.
What is the severity of CVE-2017-8168?
The severity of CVE-2017-8168 is medium with a severity value of 4.3.
How does CVE-2017-8168 affect Huawei FusionSphere OpenStack?
CVE-2017-8168 affects Huawei FusionSphere OpenStack versions V100R006C00SPC102(NFV) and V100R006C10.
How can an attacker exploit CVE-2017-8168?
An attacker accessing the internal network may exploit CVE-2017-8168 to obtain sensitive information due to an incorrect configuration item.
Is there a fix for CVE-2017-8168?
Please refer to the official Huawei security advisory at http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-openstack-en for information on how to fix CVE-2017-8168.
- agent/author
- agent/type
- agent/references
- agent/severity
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- vendor/huawei
- canonical/huawei fusionsphere openstack firmware
- version/huawei fusionsphere openstack firmware/v100r006c00spc102\(nfv\)
- version/huawei fusionsphere openstack firmware/v100r006c10