Vulnerabilities > CVE-2016-8779 - Unspecified vulnerability in Huawei Fusionaccess V100R005C10/V100R005C20

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
huawei

Summary

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol (LDAP) operation command into a specific input variable to obtain sensitive information from the database.

Vulnerable Configurations

Part Description Count
Application
Huawei
2