CVE-2017-2720 FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increas...
MediumCVSS 5.3
EPSS 0.71%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei fusionsphere openstack | = v100r006c00 | No fix listed |
| Huawei Technologies Co., Ltd. FusionSphere OpenStack | = V100R006C00 | No fix listed |
References
- www.huawei.com vendor-advisory