CVE-2016-5722

HIGH

Huawei OceanStor V3 < V300R003C10 - Plaintext Session Token Exposure

Title source: llm
STIX 2.1

Description

Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network.

References (1)

Core 1

Scores

CVSS v3 7.3
EPSS 0.0021
EPSS Percentile 42.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-200
Status published
Products (1)
huawei/ocean_stor_firmware < v300r003c00spc100
Published Jun 24, 2016
Tracked Since Feb 18, 2026