CVE-2022-48302
First published: Thu Feb 09 2023(Updated: )
The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Emui | =11.0.1 | |
| Huawei Emui | =12.0.0 | |
| Huawei Emui | =12.0.1 | |
| Huawei Harmonyos | =2.0 | |
| Huawei Harmonyos | =2.1 | |
| Huawei Harmonyos | =3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-48302?
The severity of CVE-2022-48302 is high with a severity value of 7.5.
Which software versions are affected by CVE-2022-48302?
CVE-2022-48302 affects Huawei Emui 11.0.1, Huawei Emui 12.0.0, Huawei Emui 12.0.1, Huawei Harmonyos 2.0, Huawei Harmonyos 2.1, and Huawei Harmonyos 3.0.0.
What is the vulnerability in the AMS module?
The vulnerability in the AMS module is the lack of permission verification in APIs.
How does the vulnerability in the AMS module affect data confidentiality?
Successful exploitation of the vulnerability in the AMS module may affect data confidentiality.
How can I fix CVE-2022-48302?
To fix CVE-2022-48302, it is recommended to follow the mitigation steps provided by Huawei in their security bulletin.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- vendor/huawei
- canonical/huawei emui
- version/huawei emui/11.0.1
- version/huawei emui/12.0.0
- version/huawei emui/12.0.1
- canonical/huawei harmonyos
- version/huawei harmonyos/2.0
- version/huawei harmonyos/2.1
- version/huawei harmonyos/3.0.0