Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2022-43449

Arbitrary file read via download_server.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenHarmony

Description

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

  • 3.1.0affected

References