CVE-2022-41761

2023-12-2500:00:00

mitre

www.cve.org

nokia

nfm-t

r19.9

absolute path traversal

vm manager

webui

remote authenticated attacker

read arbitrary files

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

41.2%

JSON

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.

References

www.gruppotim.it/it/footer/red-team.html