4.8
CVE-2022-46407
- EPSS 0.1%
- Veröffentlicht 29.06.2023 02:15:15
- Zuletzt bearbeitet 21.11.2024 07:30:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginEricsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to exploit the vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ericsson ≫ Network Manager Version < 22.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.272 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.8 | 1.7 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
|
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.