CVE-2022-39821 Information disclosure in n/a
Attackers can read cleartext credentials from world-readable log files in Nokia 1350 OMS, leading to potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-39821?
CVE-2022-39821 is a high-severity vulnerability in n/a, published on 13 Sep 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.
Weakness: CWE-532
Which versions are affected by CVE-2022-39821?
It affects 1 product.
Products include Nokia 1350 Optical Management System.
How do I fix CVE-2022-39821?
No fix has been published for CVE-2022-39821 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-39821 being exploited?
There is no known exploitation of CVE-2022-39821 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qrf6-gx4g-hqv9.