medium5.3
CVE-2017-2720
FusionSphere OpenStack V100R006C00 has an information exposure vulnerability.
Impact
FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Fusionsphere Openstack | Version v100r006c00 |