CVE-2017-8188

Description

FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.

Affected products

• Huawei Technologies Co., Ltd. / FusionSphere OpenStackV100R006C00SPC102(NFV) – V100R006C00SPC102(NFV)

References

• VENDOR_ADVISORYhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en