Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-40713

Опубликовано: 19 сент. 2022
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nokia:1350_optical_management_system:14.2:*:*:*:*:*:*:*

EPSS

Процентиль: 49%
0.00256
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22
CWE-22

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.

EPSS

Процентиль: 49%
0.00256
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22
CWE-22