EUVD-2022-50995

Malicious code in bioql PyPI...

CVE-2022-48295

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems batch installation of applications...

Design/Logic Flaw

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems batch installation of applications...

CVE-2022-48295

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems batch installation of applications...

CVE-2022-48295

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems batch installation of applications...

PT-2023-15674

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The IHwAntiMalPlugin interface lacks permission verification, which can be exploited to cause issues with batch installation of applications. No informati...

CVE-2022-48295: Improper Preservation of Permissions

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems batch installation of applications...

CVE-2022-48295

CVE-2022-48295 affects Huawei HarmonyOS where the IHwAntiMalPlugin interface performs no permission verification. The underlying root cause is lack of access checks on this interface, enabling an attacker to trigger a flooding/batch installation scenario. The CVSS data indicates network access wi...