← Back

CVE-2021-32571

nvd nist
Published: Oct 14, 2021Modified: Nov 21, 2024

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Ericsson Network Manager is a new generation OSS system which OSS-RC customers shall upgrade to

Affected (1)

Ericsson
1 product
Operations Support System Radio And Core Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Operations Support System Radio And Core Firmware
Up to 18b
Running on/withPlatform Versions
Ericsson
Operations Support System Radio And Core
All versions

Related CWEs

CWE-459
Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (2)

Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.