CVE-2021-22376 — Improper Privilege Management in Huawei Harmonyos

CWE-269 — Improper Privilege Management CWE-276 — Incorrect Default Permissions2 documents2 sources

Severity

8.4HIGHNVD

EPSS

0.0%

top 95.72%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Harmonyos

Timeline

PublishedJun 30

Latest updateMay 24

Description

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to bypass user restrictions.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.5 | Impact: 5.9

Affected Packages1 packages

▶NVDhuawei/harmonyos2.0

🔴Vulnerability Details

GHSA

GHSA-f3w5-7qjv-q377: There is an Improper Permission Management Vulnerability in Huawei Smartphone↗2022-05-24

▶