CVE-2024-57957

Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Scoring

Severity

MEDIUM

CVSS base score

6.6

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS probability

0.33%

CWE

CWE-657

Published

2025-02-06

Last modified

2026-03-13

Affected products

• Huawei HarmonyOS

Weakness type

• CWE-657

Related vulnerabilities

• CVE-2026-48399 — Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
• CVE-2026-39888 — PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
• CVE-2026-30792 — RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
• CVE-2025-54255 — Acrobat Reader | Violation of Secure Design Principles (CWE-657)
• CVE-2025-24887 — OpenCTI bypass of protected attribute update
• CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation
• CVE-2023-29320 — ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw
• CVE-2022-30683 — AEM Violation of Secure Design Principles Security feature bypass

Markdown version · Browse all CVEs