CVE-2020-9207

Publication date

2020-12-29 17:57:18

Family

huawei

State

PUBLISHED

Description

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.