PT-2022-24192 · Unknown · Openharmony

Published 2022-09-09 · Updated 2022-09-14 · CVE-2022-38081

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenHarmony versions prior to 3.1.2

Description The issue allows LAN attackers to bypass distributed permission control, but to exploit this, attackers need another vulnerability to obtain system access.

Recommendations For OpenHarmony versions prior to 3.1.2, update to a version newer than 3.1.2 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-305

Related Identifiers

CVE-2022-38081

Affected Products

Openharmony

References · 3

• https://osv.dev/vulnerability/CVE-2022-38081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38081 · Security Note
• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md · Note