Description
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.
Scores
CVSS v3
6.2
EPSS
0.0005
EPSS Percentile
15.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-305
CWE-287
Status
published
Products (1)
openharmony/openharmony
3.1 - 3.1.2
Published
Sep 09, 2022
Tracked Since
Feb 18, 2026