← CVE Intelligence

CVE-2022-38081

Tokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system. PUBLISHED

Description (CNA)

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.

Affected (CNA)

Vendor / productVersions
OpenHarmony / OpenHarmonyaffected OpenHarmony-v3.1.x-Release through 3.1.2

CWE

CWE-305

References

ADP enrichment

CVE

No English description supplied.