CVE-2017-17323

Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:ibmc_firmware:v200r002c10:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ibmc_firmware:v200r002c20:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ibmc_firmware:v200r002c30:*:*:*:*:*:*:*
cpe:2.3:h:huawei:ibmc:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:17

Type Values Removed Values Added
References () http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en - Vendor Advisory () http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-ibmc-en - Vendor Advisory

Information

Published : 2018-03-09 17:29

Updated : 2024-11-21 03:17


NVD link : CVE-2017-17323

Mitre link : CVE-2017-17323

CVE.ORG link : CVE-2017-17323


JSON object : View

Products Affected

huawei

  • ibmc
  • ibmc_firmware
CWE
CWE-863

Incorrect Authorization