medium6.5
CVE-2025-24816
Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API.
Impact
Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | Mantaray Nm | before 25R2-NM |