Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Telephony in communication subsystem sends public events with personal data, but the permission is not set.
Vulnerability Description
OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
认证机制不恰当
Vulnerability Title
OpenHarmony 安全漏洞
Vulnerability Description
OpenHarmony是中国开放原子开源基金会（OpenAtom Foundation）基金会的一种鸿蒙操作系统的开源项目。 OpenHarmony telephony_state_registry_telephony_sms_mms存在安全漏洞，该漏洞通信子系统中的电话发送带有个人数据的公共事件，但未设置权限,攻击者利用该漏洞可以监听公共事件并在未经许可的情况下获取手机号码和短信数据等信息，以下产品和版本受到影响：OpenHarmony-v3.1-Release 到 OpenHarmony-v3.1.4
CVSS Information
N/A
Vulnerability Type
N/A