CVE-2023-3116

Liteos-A has a incorrect default permissions vulnerability

CVSS 7.3 HIGHEPSS 0.2%CWE-276

in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file through incorrect default permissions.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Affected products

OpenHarmony · OpenHarmony

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md