CVE-2022-39821

Published: Sep 13, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.

Affected (1)

Products: Nokia: 1350 Optical Management System

Nokia

1 product

1350 Optical Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nokia 1350 Optical Management System	Version 14.2

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://www.gruppotim.it/it/footer/red-team.html

Source: cve@mitre.org

Third Party Advisory

https://www.gruppotim.it/it/footer/red-team.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.