{"id":"CVE-2020-9116","state":"PUBLISHED","title":"Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Du","description":"Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege.","publishedAt":"2020-11-30T23:53:58.000Z","updatedAt":"2024-08-04T10:19:20.030Z","severity":null,"assigner":"huawei","products":["n/a FusionCompute"],"affected":[{"vendor":"n/a","product":"FusionCompute","versions":[{"version":"6.5.1,8.0.0","status":"affected"}]}],"references":["https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201118-01-fusioncompute-en"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:47.279Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/9xxx/CVE-2020-9116.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-9116","state":"PUBLISHED","datePublished":"2020-11-30T23:53:58.000Z","dateUpdated":"2024-08-04T10:19:20.030Z","assignerShortName":"huawei","assignerOrgId":"25ac1063-e409-4190-8079-24548c77ea2e","dateReserved":"2020-02-18T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege."}],"affected":[{"vendor":"n/a","product":"FusionCompute","versions":[{"version":"6.5.1,8.0.0","status":"affected"}]}],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201118-01-fusioncompute-en","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Command Injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"huawei","dateUpdated":"2020-11-30T23:53:58.000Z","orgId":"25ac1063-e409-4190-8079-24548c77ea2e"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@huawei.com","ID":"CVE-2020-9116","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"FusionCompute","version":{"version_data":[{"version_value":"6.5.1,8.0.0"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Command Injection"}]}]},"references":{"reference_data":[{"name":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201118-01-fusioncompute-en","refsource":"MISC","url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201118-01-fusioncompute-en"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201118-01-fusioncompute-en","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:19:20.030Z"}}]}}}