CVE-2022-48494
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 19, 2023
Updated: Dec 17, 2024
CWE ID 287
CWE ID 306
Summary
CVE-2022-48494 is a vulnerability that arises from insufficient app identity verification in the pre-authorization function. This issue allows malicious applications to bypass the usual authorization process and gain pre-authorized access. The consequences of exploitation are significant, as unauthorized apps can now perform actions they wouldn't be able to otherwise. Organizations using this affected system are advised to implement stricter verification methods to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Huawei EMUI
Affected Vendors
- Huawei Technologies