Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei ManageOne 输入验证错误漏洞
Vulnerability Description
Huawei ManageOne是中国华为（Huawei）公司的一套云数据中心管理解决方案。该产品支持异构云资源池统一管理，并提供多级VDC匹配客户组织模型、服务目录规划、自助服务、集中告警分析和智能运维等功能。 华为ManageOne产品存在输入验证错误漏洞，该漏洞源于对部分参数没有做输入校验，攻击者可利用该漏洞成功利用这个漏洞后可以在目标设备上注入命令。
CVSS Information
N/A
Vulnerability Type
N/A