CVE-2021-37086

There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.6 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
huaweiCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
VendorProductVersion
huaweiharmonyos
𝑥
< 2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727