CVE-2023-0035: softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".
softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-0035?
CVE-2023-0035 is an authentication bypass vulnerability in the softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions.
What is the severity of CVE-2023-0035?
CVE-2023-0035 has a severity rating of 7.8 (high).
How does CVE-2023-0035 affect OpenHarmony?
CVE-2023-0035 affects OpenHarmony-v3.0.5 and prior versions, allowing local attackers to bypass authentication and attack other SAs with high privilege.
How can I fix CVE-2023-0035?
There is no available fix or patch for CVE-2023-0035 at the moment. It is recommended to monitor for official updates from OpenHarmony and apply them as soon as they become available.
Where can I find more information about CVE-2023-0035?
You can find more information about CVE-2023-0035 in the official OpenHarmony security disclosure: [link](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md)