CVE-2017-2720

Published: Nov 22, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure.

Affected (1)

Products: Huawei: Fusionsphere Openstack

1 product

Fusionsphere Openstack

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Fusionsphere Openstack	Version v100r006c00

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-fusionsphere-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-fusionsphere-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.