The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources.
                
            References
                    | Link | Resource | 
|---|---|
| https://consumer.huawei.com/en/support/bulletin/2023/3/ | Vendor Advisory | 
| https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 | Vendor Advisory | 
| https://consumer.huawei.com/en/support/bulletin/2023/3/ | Vendor Advisory | 
| https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
            
            
  | 
    
History
                    21 Nov 2024, 07:33
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://consumer.huawei.com/en/support/bulletin/2023/3/ - Vendor Advisory | |
| References | () https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - Vendor Advisory | 
03 Apr 2023, 18:14
| Type | Values Removed | Values Added | 
|---|---|---|
| CWE | CWE-22 | |
| CVSS | 
        v2 :  v3 :  | 
    
        v2 : unknown
         v3 : 5.3  | 
| References | (MISC) https://consumer.huawei.com/en/support/bulletin/2023/3/ - Vendor Advisory | |
| References | (MISC) https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 - Vendor Advisory | |
| First Time | 
        
        Huawei harmonyos
         Huawei Huawei emui  | 
|
| CPE | cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:* cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*  | 
27 Mar 2023, 22:15
| Type | Values Removed | Values Added | 
|---|---|---|
| New CVE | 
Information
                Published : 2023-03-27 22:15
Updated : 2024-11-21 07:33
NVD link : CVE-2022-48361
Mitre link : CVE-2022-48361
CVE.ORG link : CVE-2022-48361
JSON object : View
Products Affected
                huawei
- harmonyos
 - emui
 
CWE
                
                    
                        
                        CWE-22
                        
            Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
