Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operation as another user via a crafted message, aka "Horizontal Privilege Escalation Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei Video Content Management 权限许可和访问控制漏洞
Vulnerability Description
Huawei Video Content Management（VCM）是中国华为（Huawei）公司的一套视频内容管理系统。 Huawei VCM V100R001C10B010版本中存在提取漏洞，该漏洞源于程序对登录用户进行身份和权限验证处理不当。远程攻击者可通过向服务器发送恶意构造的消息利用该漏洞对其他用户创建的案件进行非法操作，影响其他用户的操作和使用。
CVSS Information
N/A
Vulnerability Type
N/A