There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10. Due to the improperly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak.
The product writes sensitive information to a log file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ecns280_td_firmware | Huawei | v100r005c00 (including) | v100r005c00 (including) |
| Ecns280_td_firmware | Huawei | v100r005c10 (including) | v100r005c10 (including) |