Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7c72-6v53-xq93

Опубликовано: 04 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.

EPSS

Процентиль: 11%
0.00037
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 6.2
nvd
больше 3 лет назад

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.

EPSS

Процентиль: 11%
0.00037
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-552