CVE-2022-46407 Open redirect in n/a
An attacker with admin access can exploit an open redirect in the editprofile endpoint to redirect users to malicious domains.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-46407?
CVE-2022-46407 is a medium-severity vulnerability in n/a, published on 29 Jun 2023. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to exploit the vulnerability
Weakness: CWE-601
Which versions are affected by CVE-2022-46407?
It affects 1 product.
Products include Ericsson Network Manager.
How do I fix CVE-2022-46407?
No fix has been published for CVE-2022-46407 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-46407 being exploited?
There is no known exploitation of CVE-2022-46407 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2023-39909 Missing authorization in n/a
- CVE-2024-25007 Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability
- CVE-2025-27258 Ericsson Network Manager: escalation of privilege vulnerability
- CVE-2022-46408 Code injection in n/a
- CVE-2021-28488 Missing authorization in n/a
Sources
Also known as GHSA-323m-j8jx-g8pq.