medium4.3
CVE-2017-17323
Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability.
Impact
Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ibmc Firmware | Versions v200r002c10, v200r002c20, v200r002c30 |