CVE-2016-7108

MEDIUM

Huawei UMA < V200R001C00SPC200 - Authenticated Exposure of User Password Hashes

Title source: llm
STIX 2.1

Description

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92619

Scores

CVSS v3 6.5
EPSS 0.0010
EPSS Percentile 26.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
huawei/uma < v200r001c00spc200
Published Sep 07, 2016
Tracked Since Feb 18, 2026