CVE-2016-7107

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors.

• CWE-284

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-enVendor Advisory
• http://www.securityfocus.com/bid/92619Third Party Advisory, VDB Entry
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-enVendor Advisory
• http://www.securityfocus.com/bid/92619Third Party Advisory, VDB Entry

Published

Sep 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7097The filesystem implementation in the Linux kernel through 4.…
• CVE-2016-7098Race condition in wget 1.17 and earlier, when used in recurs…
• CVE-2016-7099The tls.checkServerIdentity function in Node.js 0.10.x befor…
• CVE-2016-7101The SGI coder in ImageMagick before 7.0.2-10 allows remote a…6.5
• CVE-2016-7102ownCloud Desktop before 2.2.3 allows local users to execute …
• CVE-2016-7103Cross-site scripting (XSS) vulnerability in jQuery UI before…6.1
• CVE-2016-7108Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
• CVE-2016-7109Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
• CVE-2016-7110Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
• CVE-2016-7111MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a wea…
• CVE-2016-7112A vulnerability has been identified in Firmware variant PROF…
• CVE-2016-7113A vulnerability has been identified in Firmware variant PROF…