{"id":"CVE-2017-8190","state":"PUBLISHED","title":"FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An att","description":"FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software.","publishedAt":"2017-11-22T19:00:00.000Z","updatedAt":"2024-09-17T00:36:06.233Z","severity":null,"assigner":"huawei","products":["Huawei Technologies Co., Ltd. FusionSphere OpenStack"],"affected":[{"vendor":"Huawei Technologies Co., Ltd.","product":"FusionSphere OpenStack","versions":[{"version":"V100R006C00SPC102(NFV)","status":"affected"}]}],"references":["http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:57.959Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/8xxx/CVE-2017-8190.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-8190","state":"PUBLISHED","datePublished":"2017-11-22T19:00:00.000Z","dateUpdated":"2024-09-17T00:36:06.233Z","assignerShortName":"huawei","assignerOrgId":"25ac1063-e409-4190-8079-24548c77ea2e","dateReserved":"2017-04-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software."}],"affected":[{"vendor":"Huawei Technologies Co., Ltd.","product":"FusionSphere OpenStack","versions":[{"version":"V100R006C00SPC102(NFV)","status":"affected"}]}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"improper verification of cryptographic signature","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"huawei","dateUpdated":"2017-11-22T18:57:01.000Z","orgId":"25ac1063-e409-4190-8079-24548c77ea2e"},"datePublic":"2017-11-15T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@huawei.com","DATE_PUBLIC":"2017-11-15T00:00:00","ID":"CVE-2017-8190","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"FusionSphere OpenStack","version":{"version_data":[{"version_value":"V100R006C00SPC102(NFV)"}]}}]},"vendor_name":"Huawei Technologies Co., Ltd."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"improper verification of cryptographic signature"}]}]},"references":{"reference_data":[{"name":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en","refsource":"CONFIRM","url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T16:27:22.990Z"}}]}}}