Design/Logic Flaw

2017-04-0220:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.9%

JSON

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol (LDAP) operation command into a specific input variable to obtain sensitive information from the database.

CPENameOperatorVersion
fusionaccesseq100r5c10-v
fusionaccesseq100r5c20-v

CPE	Name	Operator	Version
	fusionaccess	eq	100r5c10-v
	fusionaccess	eq	100r5c20-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161130-01-ldap-en

www.securityfocus.com/bid/94620