CVE-2023-39403
13.08.2023, 13:15
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.Enginsight
| Vendor | Product | Version |
|---|---|---|
| huawei | emui | 11.0.1 |
| huawei | emui | 12.0.0 |
| huawei | emui | 12.0.1 |
| huawei | emui | 13.0.0 |
| huawei | harmonyos | 2.0.0 |
| huawei | harmonyos | 2.0.1 |
| huawei | harmonyos | 2.1.0 |
| huawei | harmonyos | 3.0.0 |
| huawei | harmonyos | 3.1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-358 - Improperly Implemented Security Check for StandardThe software does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
References