CVE-2021-22334 — Incorrect Authorization in Huawei Emui

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
7.4HIGHNVD
EPSS
0.0%
top 90.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Magic UI
Timeline
PublishedJun 3
Latest updateMay 24

Description

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirections.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:NExploitability: 2.8 | Impact: 4.0

Affected Packages2 packages

▶NVDhuawei/emui10.1.1, 11.0.0+1
▶NVDhuawei/magic_ui3.1.1, 4.0.0+1

🔴Vulnerability Details

2
GHSA
GHSA-mfhc-7xhv-ph2r: There is an Improper Access Control vulnerability in Huawei Smartphone↗2022-05-24
▶
CVEList
CVE-2021-22334: There is an Improper Access Control vulnerability in Huawei Smartphone↗2021-06-03
▶
CVE-2021-22334 — Incorrect Authorization in Huawei Emui | cvebase