Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-22298

Опубликовано: 06 фев. 2021
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b070:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b080:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b040:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b050:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b060:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b070:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b080:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b090:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:*
cpe:2.3:a:huawei:manageone:8.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 40%
0.00185
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.

EPSS

Процентиль: 40%
0.00185
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo