CVE-2021-31932: Critical severity nokia bts trs web console vulnerability
Nokia BTS TRS web console FTMW20FP22019.08.160010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-31932?
CVE-2021-31932 is a vulnerability in the Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 software that allows an unauthenticated user to bypass authentication and gain access to all exposed functionalities.
How severe is CVE-2021-31932?
CVE-2021-31932 has a severity rating of 9.8, which is classified as critical.
How can an unauthenticated user bypass authentication using CVE-2021-31932?
An unauthenticated user can bypass authentication in CVE-2021-31932 by using URL encoding for the dot character.
What software is affected by CVE-2021-31932?
The Nokia BTS TRS web console version FTM_W20_FP2_2019.08.16_0010 is affected by CVE-2021-31932.
Is there a reference link for CVE-2021-31932?
Yes, you can find more information about CVE-2021-31932 at the following link: [http://packetstormsecurity.com/files/165964/Nokia-Transport-Module-Authentication-Bypass.html](http://packetstormsecurity.com/files/165964/Nokia-Transport-Module-Authentication-Bypass.html)