CVE-2022-46407

2023-06-2900:00:00

mitre

www.cve.org

ericsson network manager

rest endpoint

editprofile

open redirect

http header injection

unauthorized domain redirection

vulnerability

cve-2022-46407

admin access

5.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to exploit the vulnerability

References

www.gruppotim.it/it/footer/red-team.html