Security Advisory
CVE-2019-25237
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with user_role_mod set to integer value 1 to elevate their privileges.