Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2023-0036

platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

  • Published: Jan 9, 2023
  • Updated: Nov 8, 2023
  • CVE: CVE-2023-0036
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
openatom / openharmony 3.0 3.0.5.x