Privilege Escalation Vulnerability in Ericsson Network Manager

CVE-2021-32570

What is CVE-2021-32570?

In affected versions of Ericsson Network Manager prior to 21.2, a privilege escalation vulnerability exists that allows users within the same AMOS authorization group to access sensitive log file data. This occurs because highly privileged AMOS users can retrieve information improperly stored in specific log files. As all AMOS users are defined and authorized by the Security Administrator, this vulnerability poses a significant risk by enabling data exposure and the potential for escalated privileges within the ENM system.

References