CVE-2023-23437: low-severity vulnerability in Honor com.hihonor.vmall
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 0.2%
In short
A security flaw in some Honor products allows sensitive information to be exposed to unauthorized users. This vulnerability could let attackers access private data without proper permissions.
Technical detail
An information disclosure vulnerability exists in Honor products due to insufficient access controls (CWE-922). Successful exploitation could result in unauthorized access to sensitive data, though the attack vector and specific prerequisites are not detailed in the available information.
Summary generated and translated by AI from the official description.
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Honor · com.hihonor.vmall