Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-22092

Bundlemanager has an authentication bypass vulnerability

Description

in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

Default version status: unaffected

  • v3.2.0 to ≤ v3.2.4affected

References