CVE-2022-48300

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@huawei.com

Published

2023-02-09

Last modified

2025-03-24

Weaknesses

CWE-306

Affected products

• Emui (Huawei)
• Harmonyos (Huawei)

References

• https://consumer.huawei.com/en/support/bulletin/2023/2/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474