{"id":"CVE-2017-8192","aliases":["EUVD-2017-17154","GHSA-hjqc-wrmr-hq47"],"status":"published","title":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper...","description":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00216,"percentile":0.12091,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2017-11-22T19:00:00Z","modified":"2026-06-17T01:25:56Z","products":[{"vendor":"huawei","product":"fusionsphere_openstack"},{"vendor":"huawei technologies co., ltd.","product":"fusionsphere openstack"}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-fustionsphere-en","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8192"},{"url":"https://github.com/advisories/GHSA-hjqc-wrmr-hq47"}],"sources":{"cve":[{"id":"CVE-2017-8192","description":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.","status":"published","published":"2017-11-22T19:00:00Z","modified":"2024-09-16T22:25:35.123Z","updated_at":"2026-11-02T14:33:14.89365Z"}],"euvd":[{"id":"EUVD-2017-17154","description":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.","status":"published","published":"2017-11-22T19:00:00Z","modified":"2024-09-16T22:25:35Z","updated_at":"2026-11-03T00:55:02.946444Z"}],"ghsa":[{"id":"GHSA-hjqc-wrmr-hq47","title":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper...","description":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.","status":"published","published":"2022-05-13T01:47:21Z","modified":"2023-02-02T05:01:29Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:51:11.772726Z"}],"nvd":[{"id":"CVE-2017-8192","description":"FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.","status":"published","published":"2017-11-22T19:29:04.71Z","modified":"2026-06-17T01:25:56.737Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:04:09.7374Z"}]}}