CVE Vulnerabilities

CVE-2024-42036

Improper Privilege Management

Published: Aug 08, 2024 | Modified: Sep 13, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 13.0.0 (including) 13.0.0 (including)
Emui Huawei 14.0.0 (including) 14.0.0 (including)
Harmonyos Huawei 3.0.0 (including) 3.0.0 (including)
Harmonyos Huawei 3.1.0 (including) 3.1.0 (including)
Harmonyos Huawei 4.0.0 (including) 4.0.0 (including)
Harmonyos Huawei 4.2.0 (including) 4.2.0 (including)

Potential Mitigations

References