high7.5
CVE-2022-48289
The bundle management module lacks authentication and control mechanisms in some APIs.
Impact
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Version 12.0.1 |
| Huawei | Harmonyos | Versions 2.0.1, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474