OpenHarmony Information Leak Vulnerability Allowing Local Attackers to Access Sensitive Data

A vulnerability in OpenHarmony versions 6.0 and prior allows local attackers to leak sensitive information due to improper permission management in the filemanagement_storage_service component.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users can apply the available patches for this vulnerability in the OpenHarmony-v6.0-Release and OpenHarmony-v5.1.0-Release versions. Instructions for applying the patch can be found in the OpenHarmony filemanagement_storage_service repository.