CVE Vulnerabilities

CVE-2021-22298

Published: Feb 06, 2021 | Modified: Mar 29, 2022
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.

Affected Software

Name Vendor Start Version End Version
Manageone Huawei 6.5.1.1-b020 (including) 6.5.1.1-b020 (including)
Manageone Huawei 6.5.1.1-b030 (including) 6.5.1.1-b030 (including)
Manageone Huawei 6.5.1.1-b040 (including) 6.5.1.1-b040 (including)
Manageone Huawei 6.5.1.1-rc1.b070 (including) 6.5.1.1-rc1.b070 (including)
Manageone Huawei 6.5.1.1-rc1.b080 (including) 6.5.1.1-rc1.b080 (including)
Manageone Huawei 6.5.1.1-rc2.b040 (including) 6.5.1.1-rc2.b040 (including)
Manageone Huawei 6.5.1.1-rc2.b050 (including) 6.5.1.1-rc2.b050 (including)
Manageone Huawei 6.5.1.1-rc2.b060 (including) 6.5.1.1-rc2.b060 (including)
Manageone Huawei 6.5.1.1-rc2.b070 (including) 6.5.1.1-rc2.b070 (including)
Manageone Huawei 6.5.1.1-rc2.b080 (including) 6.5.1.1-rc2.b080 (including)
Manageone Huawei 6.5.1.1-rc2.b090 (including) 6.5.1.1-rc2.b090 (including)
Manageone Huawei 6.5.1.1-spc100.b050 (including) 6.5.1.1-spc100.b050 (including)
Manageone Huawei 6.5.1.1-spc101.b010 (including) 6.5.1.1-spc101.b010 (including)
Manageone Huawei 6.5.1.1-spc101.b040 (including) 6.5.1.1-spc101.b040 (including)
Manageone Huawei 6.5.1.1-spc200 (including) 6.5.1.1-spc200 (including)
Manageone Huawei 6.5.1.1-spc200.b010 (including) 6.5.1.1-spc200.b010 (including)
Manageone Huawei 6.5.1.1-spc200.b030 (including) 6.5.1.1-spc200.b030 (including)
Manageone Huawei 6.5.1.1-spc200.b040 (including) 6.5.1.1-spc200.b040 (including)
Manageone Huawei 6.5.1.1-spc200.b050 (including) 6.5.1.1-spc200.b050 (including)
Manageone Huawei 6.5.1.1-spc200.b060 (including) 6.5.1.1-spc200.b060 (including)
Manageone Huawei 6.5.1.1-spc200.b070 (including) 6.5.1.1-spc200.b070 (including)
Manageone Huawei 8.0.0 (including) 8.0.0 (including)

References