CVE-2017-8189

CVE-2017-8189 is a medium-severity vulnerability in Huawei Fusionsphere Openstack with a CVSS 3.x base score of 6.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-22.

Key facts

Description

FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal.

Frequently asked questions

What is CVE-2017-8189?
FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal.
How severe is CVE-2017-8189?
CVE-2017-8189 has a CVSS 3.x base score of 6.0, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2017-8189 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (20th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-8189?
CVE-2017-8189 affects Huawei Fusionsphere Openstack. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2017-8189?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2017-8189 published?
CVE-2017-8189 was published on 2017-11-22 and last updated on 2026-06-17.

References

Affected products (1)

More vulnerabilities in Huawei Fusionsphere Openstack

All CVEs affecting Huawei Fusionsphere Openstack →

Other CWE-22 (Path Traversal) vulnerabilities

Browse all CWE-22 (Path Traversal) vulnerabilities →