CVE-2017-8191 Weak cryptography in FusionSphere OpenStack

What is CVE-2017-8191?

CVE-2017-8191 is a medium-severity vulnerability in Huawei Technologies Co., Ltd. FusionSphere OpenStack, published on 22 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links.

Weakness: CWE-327

Which versions are affected by CVE-2017-8191?

It affects 1 product.

Products include Huawei Fusionsphere Openstack.

How do I fix CVE-2017-8191?

No fix has been published for CVE-2017-8191 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-8191 being exploited?

There is no known exploitation of CVE-2017-8191 in the wild and no public exploit code.

Other vulnerabilities in Huawei Technologies Co., Ltd. FusionSphere OpenStack

• CVE-2020-9079 Security feature bypass in FusionSphere OpenStack High 8.8
• CVE-2017-2718 Command injection in FusionSphere OpenStack High 8.8
• CVE-2017-2719 Command injection in FusionSphere OpenStack High 8.8
• CVE-2017-8131 Command injection in FusionSphere OpenStack High 8.8
• CVE-2017-8132 Command injection in FusionSphere OpenStack High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gpqc-rg6h-mqq7.