CVE-2024-25011

Published: Sep 18, 2025Modified: Jun 17, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf (Secondary)

Description

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://www.ericsson.com/en/about-us/security/psirt/cve-2024-25011

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

Timeline

No history available yet.