VULNERABILITY INTELLIGENCE
CVE-2017-8195
CVSS score8.8 HIGH
EPSS probability1.17%
CISA KEVNot currently listed
Published2017-11-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory