Authentication Bypass in Ericsson Catalog Manager and Order Care APIs

CVE-2024-25011

What is CVE-2024-25011?

The Ericsson Catalog Manager and Order Care APIs have been identified with a significant vulnerability arising from the lack of default authentication. This absence of authentication could allow unauthorized access, leading to potential information disclosure risks. Organizations using these APIs are urged to implement authentication checks as part of their security configurations to mitigate exposure and protect sensitive data.

References