critical9.8
CVE-2021-31932
Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass.
Impact
Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | Bts Trs Web Console | Version ftm_w20_fp2_2019.08.16_0010 |