CVE-2023-34165

2023-06-1606:54:59

huawei

www.cve.org

unauthorized access

ai touch

save for later

exploitation

third-party app

uri forgery

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

JSON

Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HarmonyOS",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.0"
      }
    ]
  }
]