Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-623f-xv48-w9h8

Опубликовано: 12 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.

Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.

EPSS

Процентиль: 91%
0.07281
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.

EPSS

Процентиль: 91%
0.07281
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287