There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.
References
Link | Resource |
---|---|
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-upload-en | Vendor Advisory |
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-upload-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:14
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-upload-en - Vendor Advisory |
Information
Published : 2021-09-28 15:15
Updated : 2024-11-21 06:14
NVD link : CVE-2021-37105
Mitre link : CVE-2021-37105
CVE.ORG link : CVE-2021-37105
JSON object : View
Products Affected
huawei
- fusioncompute
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type