CVE-2023-52107
16.01.2024, 09:15
Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.Enginsight
| Vendor | Product | Version |
|---|---|---|
| huawei | emui | 11.0.1 |
| huawei | emui | 12.0.0 |
| huawei | emui | 13.0.0 |
| huawei | harmonyos | 2.0.0 |
| huawei | harmonyos | 2.1.0 |
| huawei | harmonyos | 3.0.0 |
| huawei | harmonyos | 3.1.0 |
| huawei | harmonyos | 4.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
- CWE-732 - Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
References