Lucene search
HistoryAug 13, 2023 - 12:15 p.m.
CVE-2023-39392
vulnerability
osulogin
insecure signatures
exploitation
malicious modification
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.0005 Low
EPSS
Percentile
17.8%
Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.
Affected configurations
Node
huaweiemuiMatch12.0.1
ORhuaweiemuiMatch13.0.0
ORhuaweiharmonyosMatch2.0.1
ORhuaweiharmonyosMatch3.0.0
ORhuaweiharmonyosMatch3.1.0
Related
cve
cve
CVE-2023-39392
2023-08-13 12:15:46
cnvd
cnvd
Huawei HarmonyOS Security Restriction Bypass Vulnerability (CNVD-2023-70288)
2023-08-12 00:00:00
cvelist
cvelist
CVE-2023-39392
2023-08-13 11:33:13
prion
prion
Design/Logic Flaw
2023-08-13 12:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.0005 Low
EPSS
Percentile
17.8%
Related for NVD:CVE-2023-39392