CVE-2021-46856 - OpenCVE

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Huawei	Harmonyos Emui

Configuration 1 [-]

OR	cpe:2.3:o:huawei:emui:12.0.0:::::::*
	cpe:2.3:o:huawei:emui:12.0.1:::::::*
	cpe:2.3:o:huawei:harmonyos:2.0:::::::*
	cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*

References

Link	Resource
https://consumer.huawei.com/en/support/bulletin/2023/1/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: huawei

Published: 2022-12-20T00:00:00

Updated: 2023-01-06T09:04:20.703Z

Reserved: 2022-11-29T00:00:00

Link: CVE-2021-46856

JSON object: View

NVD Information

Status : Modified

Published: 2022-12-20T21:15:10.427

Modified: 2023-11-07T03:40:05.423

Link: CVE-2021-46856

JSON object: View

Redhat Information

No data.

CWE

CWE-22

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.\n\n"}, {"lang": "es", "value": "El m\u00f3dulo de colaboraci\u00f3n multipantalla tiene una vulnerabilidad de path traversal. La explotaci\u00f3n exitosa de esta vulnerabilidad puede afectar la confidencialidad de los datos."}], "id": "CVE-2021-46856", "lastModified": "2023-11-07T03:40:05.423", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-20T21:15:10.427", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2023/1/"}, {"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397"}, {"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}