Lucene search

[email protected]NVD:CVE-2022-48289

HistoryFeb 09, 2023 - 5:15 p.m.

CVE-2022-48289

2023-02-0917:15:12

CWE-306

[email protected]

web.nvd.nist.gov

vulnerability

bundle management

authentication

control mechanisms

data confidentiality

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.0%

JSON

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.

Affected configurations

Nvd

Node

huaweiemuiMatch12.0.1

huaweiharmonyosMatch2.0.1

huaweiharmonyosMatch3.0.0

VendorProductVersionCPE
huaweiemui12.0.1cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*
huaweiharmonyos2.0.1cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:*
huaweiharmonyos3.0.0cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	emui	12.0.1	cpe:2.3:o:huawei:emui:12.0.1:::::::*
huawei	harmonyos	2.0.1	cpe:2.3:o:huawei:harmonyos:2.0.1:::::::*
huawei	harmonyos	3.0.0	cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*

References

consumer.huawei.com/en/support/bulletin/2023/2/

device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.0%

JSON

Related for NVD:CVE-2022-48289

prion1 cvelist1 cve1