high8.8
CVE-2015-8332
Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote auth…
Impact
Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operation as another user via a crafted message, aka "Horizontal Privilege Escalation Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Vcm5010 Firmware | through v100r001c10b010 |
| Huawei | Vcm5020 Firmware | through v100r001c10b010 |