CVE-2022-43449 — Arbitrary file read via download_server.
OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal…
Published: 2022-11-03 · CVSS: 6.2 · CVSS 3.1
OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7