CVE Vulnerabilities

CVE-2022-22257

Improper Privilege Management

Published: Apr 11, 2022 | Modified: Apr 18, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 10.0.0 (including) 10.0.0 (including)
Emui Huawei 10.1.0 (including) 10.1.0 (including)
Emui Huawei 10.1.1 (including) 10.1.1 (including)
Emui Huawei 11.0.0 (including) 11.0.0 (including)
Emui Huawei 11.0.1 (including) 11.0.1 (including)
Emui Huawei 12.0.0 (including) 12.0.0 (including)
Harmonyos Huawei 2.0 (including) 2.0 (including)
Magic_ui Huawei 3.0.0 (including) 3.0.0 (including)
Magic_ui Huawei 3.1.0 (including) 3.1.0 (including)
Magic_ui Huawei 3.1.1 (including) 3.1.1 (including)
Magic_ui Huawei 4.0.0 (including) 4.0.0 (including)

Potential Mitigations

References