Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Huawei FusionCompute 命令注入漏洞
Vulnerability Description
Huawei FusionCompute是中国华为（Huawei）公司的一个用于虚拟化支持的软件。该软件为虚拟引擎，为云端主机提供虚拟化支持。 Huawei FusionCompute产品CMA服务中存在命令注入漏洞。该漏洞源于未对特殊字符做有效过滤，攻击者可利用该漏洞在特定场景下处理证书文件时进行命令注入。
CVSS Information
N/A
Vulnerability Type
N/A