← volver
CVE-2022-43449

Arbitrary file read via download_server.

CVSS 6.2 MEDIUMEPSS 0.2%CWE-20
OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
OpenHarmony · OpenHarmony

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →