Vulnerabilities > CVE-2022-43449 - Files or Directories Accessible to External Parties vulnerability in Openharmony 3.1/3.1.1/3.1.2
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_server service which run with UID 1000.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 9 |