There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.
References
| Link | Resource |
|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en | Vendor Advisory |
| https://www.oracle.com/security-alerts/cpujan2022.html | Not Applicable Third Party Advisory |
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en | Vendor Advisory |
| https://www.oracle.com/security-alerts/cpujan2022.html | Not Applicable Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en - Vendor Advisory | |
| References | () https://www.oracle.com/security-alerts/cpujan2022.html - Not Applicable, Third Party Advisory |
Information
Published : 2021-02-06 02:15
Updated : 2024-11-21 05:49
NVD link : CVE-2021-22298
Mitre link : CVE-2021-22298
CVE.ORG link : CVE-2021-22298
JSON object : View
Products Affected
huawei
- manageone
CWE