PT-2022-11099 · Huawei · Myhuawei-App

Published 2022-01-03 · Updated 2022-07-12 · CVE-2021-39972

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MyHuawei-App (affected versions not specified)

Description The issue is related to exposure of sensitive information to unauthorized actors, which could compromise confidentiality upon successful exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-39972

Affected Products

Myhuawei-App

References · 4

• https://osv.dev/vulnerability/CVE-2021-39972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39972 · Security Note
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526 · Vendor Advisory
• https://t.me/cvenotify/25408 · Telegram Post