Security Advisory - Information Leak Vulnerability in Some Huawei Servers

Some Huawei servers have an information leak vulnerability. The servers allow users to select security encryption algorithms. If an insecure encryption algorithm is selected, an attacker may decrypt ciphertext data, causing information leaks. (Vulnerability ID: HWPSIRT-2016-07019)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-6838.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-02-server-en&gt;