Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-prq4-rjxr-m2fq

Опубликовано: 08 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

EPSS

Процентиль: 13%
0.00044
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 6.2
nvd
около 3 лет назад

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

EPSS

Процентиль: 13%
0.00044
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-276