CVE-2020-9079

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a way to exploit the vulnerability to conduct directed attacks against the affected product.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Aug 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-90807.8There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specifi CVE-2020-90816.8There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mod CVE-2020-90824.6There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the at CVE-2020-90832.4HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker ca CVE-2020-90846.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may p CVE-2020-90855.3There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affec CVE-2020-90864.3There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected prod CVE-2020-90875.5Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perfor CVE-2020-90893.3There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Att CVE-2020-90907.8FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with oth CVE-2020-90915.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify CVE-2020-90924.6HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific