Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine. An authenticated attacker could create a large number of virtual machine (VM) processes to exhaust system resources. Successful exploit could make new VMs unavailable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei FusionCompute 安全漏洞
Vulnerability Description
Huawei FusionCompute是中国华为（Huawei）公司的一套基于Xen开源设计的企业级开放式服务器虚拟化解决方案。该方案提供实现虚拟数据中心自动化、高级集成和管理功能。 Huawei FusionCompute V100R005C00版本和V100R005C10版本中存在安全漏洞，该漏洞源于宿主机上某文件的权限设置不当。经认证的攻击者可通过创建大量的虚拟机进程来消耗设备资源利用该漏洞造成新的虚拟机将无法被创建。
CVSS Information
N/A
Vulnerability Type
N/A