CVE-2022-43451CWE-287

Multiple path traversal in appspawn and nwebspawn services.

High · published November 3, 2022

CVSS v3.1
8.4
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arbitrary directories or escape application sandbox.If chained with other vulnerabilities it would allow an unprivileged process to gain full root privileges.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-11-03T19:15Z
EPSS history
Timeline
  • 03 NOV 19:15Z
    Multiple path traversal in appspawn and nwebspawn services.
    cvelistv5