CVE-2023-34157 — Authentication Bypass by Spoofing in Huawei Harmonyos

CWE-290 — Authentication Bypass by Spoofing2 documents2 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 83.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Harmonyos
Timeline
PublishedJun 16

Description

Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

▶NVDhuawei/harmonyos< 2.0
▶CVEListV5huawei/harmonyos2.0.0

🔴Vulnerability Details

1
GHSA
GHSA-mpcc-6v35-3pvf: Vulnerability of HwWatchHealth being hijacked↗2023-06-16
▶