Information Disclosure Vulnerability in Nokia BTS Web Element Manager

CVE-2023-25189

Summary

Nokia's BTS Web Element Manager contains a vulnerability that leads to the potential unauthorized disclosure of sensitive service operation details. Personnel from mobile network operators, regardless of their access privileges, can access service operation information that is typically reserved for Nokia Care service personnel through SSH. This situation poses risks to data integrity and security practices, highlighting the need for heightened security measures in network management systems.

References