There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.
References
| Link | Resource |
|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en | Vendor Advisory |
| https://www.oracle.com/security-alerts/cpujan2022.html | Not Applicable Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: huawei
Published: 2021-02-06T01:31:07
Updated: 2022-02-07T14:41:30
Reserved: 2021-01-05T00:00:00
Link: CVE-2021-22298
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-02-06T02:15:12.603
Modified: 2022-03-29T16:39:33.967
Link: CVE-2021-22298
JSON object: View
Redhat Information
No data.
CWE