PT-2022-24181 · Unknown · Openharmony

Published 2022-09-09 · Updated 2022-10-28 · CVE-2022-38064

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 3.1.2

Description The issue allows local attackers to bypass permission control, potentially gaining access to sensitive information.

Recommendations For OpenHarmony versions prior to 3.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-305

Related Identifiers

CVE-2022-38064

Affected Products

Openharmony

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-38064 · Security Note
• https://osv.dev/vulnerability/CVE-2022-38064 · Vendor Advisory
• https://t.me/cibsecurity/49522 · Telegram Post
• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md · Note