Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-9248
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-01-fc-en