CVE-2023-49564 Authentication Bypass
Unauthenticated attackers can bypass authentication via crafted HTTP headers to access sensitive API endpoints in Nokia CBIS/NCS Manager.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-49564?
CVE-2023-49564 is a high-severity authentication bypass vulnerability in Nokia CBIS,NCS, published on 18 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid credentials. The root cause of this vulnerability lies in a weak verification mechanism within the authentication implementation present in the Nginx Podman container on the CBIS/NCS Manager host machine. The risk can be partially mitigated by restricting access to the management network using external firewall.
Weakness: CWE-288
Which versions are affected by CVE-2023-49564?
How do I fix CVE-2023-49564?
No fix has been published for CVE-2023-49564 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-49564 being exploited?
There is no known exploitation of CVE-2023-49564 in the wild and no public exploit code.
Sources
Also known as GHSA-8m7g-5hfv-c2jg.