Unprotected Storage of Credentials in NOKIA NFM-T Network Element Manager
CVE-2022-39820

6.5MEDIUM

Key Information:

Vendor

Nokia
Status
Network Functions Manager For Transport
Vendor
CVE Published:
25 December 2023

What is CVE-2022-39820?

An unprotected storage of credentials vulnerability exists in the Network Element Manager component of NOKIA NFM-T R19.9. This flaw can be exploited by an authenticated remote user who has access privileges to specific directories, such as /root or /DEPOT. The vulnerability allows the user to read cleartext credentials from sensitive files located at /root/RestUploadManager.xml.DRC and /DEPOT/KECustom_199/OTNE_DRC/RestUploadManager.xml. This compromise poses severe risks, enabling unauthorized access to the NFM-T web portal and control over all PPS Network elements.

References

https://www.gruppotim.it/it/footer/red-team.html

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.