CVE-2018-10286

The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to…

published April 22, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06289 · 93.5th percentile
Published
2018-04-22T13:00Z
EPSS history
Timeline
  • 22 APR 13:00Z
    The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to…
    cvelistv5