CVE-2021-22298
Summary
| CVE | CVE-2021-22298 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-06 02:15:00 UTC |
| Updated | 2022-03-29 16:39:00 UTC |
| Description | There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Huawei | Manageone | 6.5.1.1 | b020 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc1.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc1.b080 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b080 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b090 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc100.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc101.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc101.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b070 | All | All |
| Application | Huawei | Manageone | 8.0.0 | All | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b020 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc1.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc1.b080 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b070 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b080 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | rc2.b090 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc100.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc101.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc101.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b050 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b060 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | spc200.b070 | All | All |
| Application | Huawei | Manageone | 8.0.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle Critical Patch Update Advisory - January 2022 | MISC | www.oracle.com | |
| Security Advisory - Logic Vulnerability in Huawei Gauss100 Product | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 91779 Cygwin Curl Package Multiple Security Vulnerabilities