CVE-2017-17323

Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:ibmc_firmware:v200r002c10:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ibmc_firmware:v200r002c20:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ibmc_firmware:v200r002c30:*:*:*:*:*:*:*
cpe:2.3:h:huawei:ibmc:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-03-09 17:29

Updated : 2024-02-28 16:25


NVD link : CVE-2017-17323

Mitre link : CVE-2017-17323

CVE.ORG link : CVE-2017-17323


JSON object : View

Products Affected

huawei

  • ibmc
  • ibmc_firmware
CWE
CWE-863

Incorrect Authorization