Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqqf-3x7j-j33m

Опубликовано: 08 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.

EPSS

Процентиль: 9%
0.00033
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287
CWE-319

Связанные уязвимости

CVSS3: 8.3
nvd
около 3 лет назад

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.

EPSS

Процентиль: 9%
0.00033
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287
CWE-319