CVE-2023-25189

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the…

Low · published September 25, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the access privileges, having a possibility to read BTS service operation details performed by Nokia Care service personnel via SSH.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AC:H/AV:L/A:N/C:L/I:L/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00126 · 2.1th percentile
Published
2024-09-25T00:00Z
EPSS history
Timeline
  • 25 SEP 00:00Z
    BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the…
    cvelistv5