CVE-2021-28488

Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already…

published March 8, 2022

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly privileged role). Users in the same AMOS authorization group can retrieve managed-network data that was not set to be accessible to the entire group (i.e., was only set to be accessible to a subset of that group).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01118 · 65.9th percentile
Published
2022-03-08T22:51Z
EPSS history
Timeline
  • 08 MAR 22:51Z
    Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already…
    cvelistv5