medium6.5
CVE-2022-40715
An issue was discovered in NOKIA 1350OMS R14.2.
Impact
An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | 1350 Optical Management System | Version 14.2 |