high7.5
CVE-2022-48301
The bundle management module lacks permission verification in some APIs.
Impact
The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 11.0.1, 12.0.0, 12.0.1 |
| Huawei | Harmonyos | Versions 2.0, 2.1.0, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
- https://consumer.huawei.com/en/support/bulletin/2023/2/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474