CVE-2020-9114: huawei fusioncompute Improper Privilege Management

Vulnerability summary

CVE-2020-9114 is a high (CVSS 7.8) Improper Privilege Management vulnerability in huawei fusioncompute. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.7% of scored vulnerabilities.

Timeline

1. 01-12-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with common privilege may access some specific files and get the administrator privilege in the affected products. Successful exploit will cause privilege escalation.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.