high7.5
CVE-2022-48300
The WMS module lacks the authentication mechanism in some APIs.
Impact
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 11.0.1, 12.0.0, 12.0.1 |
| Huawei | Harmonyos | Versions 2.0, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474