medium6.5
CVE-2022-41761
An issue was discovered in NOKIA NFM-T R19.9.
Impact
An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | Network Functions Manager For Transport | Version 19.9 |