Security Advisory

CVE-2022-41761

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-25 00:00:00
Last updated 2024-08-03 12:49:44
Assigner mitre
State PUBLISHED

Description

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.