high7.5
CVE-2023-44093
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confiden…
Impact
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Harmonyos | Versions 2.0, 2.0.1, 2.1.0, 3.0.0, 3.1.0 |
| Huawei | Emui | Versions 11.0.1, 12.0, 12.0.1, 13.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/10/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
- https://consumer.huawei.com/en/support/bulletin/2023/10/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540