Open Redirect Vulnerability in Ericsson Network Manager
CVE-2022-46407

4.8MEDIUM

Key Information:

Vendor

Ericsson

Status
Network Manager
Vendor
CVE Published:
29 June 2023

What is CVE-2022-46407?

Ericsson Network Manager (ENM) prior to version 22.2 contains a vulnerability in the REST endpoint 'editprofile'. This vulnerability allows for Open Redirect HTTP Header Injection, potentially leading to the redirection of submitted requests to unauthorized domains. Exploitation of this vulnerability requires admin or elevated access, underscoring the need for strict access controls and monitoring to prevent potential security breaches.

References

https://www.gruppotim.it/it/footer/red-team.html

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.