What is CVE-2022-39821?

CVE-2022-39821 is a high-severity vulnerability in Nokia 1350 Optical Management System, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2022-09-13.

How severe is CVE-2022-39821?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Nokia 1350 Optical Management System

CVE-2022-39821

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.

Published 2022-09-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.007 (52.3th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 52nd percentile — 52.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: +0.001

Affected products

Nokia 1350 Optical Management System — versions 14.2

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

www.gruppotim.it/it/footer/red-team.html (Third Party Advisory)

Frequently asked questions

What is CVE-2022-39821?: CVE-2022-39821 is a high-severity vulnerability in Nokia 1350 Optical Management System, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2022-09-13.
How severe is CVE-2022-39821?: High severity. CVSS v3 base score is 7.5 out of 10.