Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors.Referenceshttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-enhttp://www.securityfocus.com/bid/92619
