high7.5
CVE-2022-39821
In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs.
Impact
In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | 1350 Optical Management System | Version 14.2 |