What is CVE-2022-39821?

CVE-2022-39821 is a high-severity vulnerability in Nokia 1350 Optical Management System, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2022-09-13.

How severe is CVE-2022-39821?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Nokia 1350 Optical Management System

CVE-2022-39821

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.

EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Nokia 1350_optical_management_system — versions 14.2
N/a — versions n/a

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-39821?: CVE-2022-39821 is a high-severity vulnerability in Nokia 1350 Optical Management System, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2022-09-13.
How severe is CVE-2022-39821?: High severity. CVSS v3 base score is 7.5 out of 10.