CVEvulnerability

CVE-2022-43451

6.5 MEDIUM Published 2022-11-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Weaknesses
CWE-22, CWE-287

Description

OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape application sandbox.If chained with other vulnerabilities it would allow an unprivileged process to gain full root privileges.

Affected configurations

• openharmony openharmony (>= 3.1 <= 3.1.2)

Related

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-287 Improper Authentication weakness

References