CVE-2023-44093

2023-10-1110:36:21

huawei

github.com

cve-2023-44093

package names

public keys

security module

exploitation

service confidentiality

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Vulnerability of package names’ public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality.

References

consumer.huawei.com/en/support/bulletin/2023/10/

device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540