VULNERABILITY INTELLIGENCE
CVE-2017-8192
CVSS score7.8 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2017-11-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.
Weakness classification
- CWE-863: Incorrect Authorization
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory