CVEvulnerability

CVE-2015-8335

6.5 MEDIUM Published 2016-01-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-01-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading the log.

Affected configurations

• huawei vcn500 v100r002c00spc200 • huawei vcn500 v100r002c00spc200b010

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References