OpenHarmony Security Access Token Permission Bypass Vulnerability Allowing Information Disclosure

A permission bypass vulnerability has been identified in the security_access_token module of OpenHarmony in versions through 5.0.3. This vulnerability allows local attackers to bypass permission restrictions, leading to unauthorized access to sensitive information.

Impact

Exploitation of this vulnerability can result in unauthorized disclosure of sensitive information.

Remediation

Users can apply the available patch by updating to the OpenHarmony 5.0.3 version. Instructions for applying the patch can be found in the OpenHarmony security repository on Gitee.