OpenHarmony Telephony Call Manager Module Permission Bypass Vulnerability Allowing Information Disclosure

A vulnerability exists in the OpenHarmony telephony call manager module in versions through 5.0.3. This vulnerability allows local attackers to bypass permissions, leading to unauthorized access to sensitive information. The issue arises from improper permission handling, which can be exploited to access data that should be restricted.

Impact

Exploitation of this vulnerability can result in unauthorized access to sensitive information.

Remediation

Users can apply the available patch by updating to the OpenHarmony 5.0.3 release version. Instructions for applying the patch can be found in the OpenHarmony telephony call manager repository on Gitee.