high7.5
CVE-2022-48299
The WMS module lacks the authentication mechanism in some APIs.
Impact
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Version 12.0.1 |
| Huawei | Harmonyos | Versions 2.0, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474