CVE-2023-49240
EUVD-2023-5324306.12.2023, 09:15
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| huawei | emui | 11.0.1 |
| huawei | emui | 12.0.0 |
| huawei | emui | 13.0.0 |
| huawei | harmonyos | 2.0.0 |
| huawei | harmonyos | 3.0.0 |
| huawei | harmonyos | 3.1.0 |
| huawei | harmonyos | 4.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
References