CVE-2017-15321 Information disclosure in FusionSphere OpenStack

What is CVE-2017-15321?

CVE-2017-15321 is a low-severity vulnerability in Huawei Technologies Co., Ltd. FusionSphere OpenStack, published on 22 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak.

Weakness: CWE-200

Which versions are affected by CVE-2017-15321?

It affects 1 product.

Products include Huawei Fusionsphere Openstack.

How do I fix CVE-2017-15321?

No fix has been published for CVE-2017-15321 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-15321 being exploited?

There is no known exploitation of CVE-2017-15321 in the wild and no public exploit code.

Other vulnerabilities in Huawei Technologies Co., Ltd. FusionSphere OpenStack

• CVE-2020-9079 Security feature bypass in FusionSphere OpenStack High 8.8
• CVE-2017-2718 Command injection in FusionSphere OpenStack High 8.8
• CVE-2017-2719 Command injection in FusionSphere OpenStack High 8.8
• CVE-2017-8131 Command injection in FusionSphere OpenStack High 8.8
• CVE-2017-8132 Command injection in FusionSphere OpenStack High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wj5v-7qmm-hqcg.