First published: Tue Sep 13 2022(Updated: )
In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
=14.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2022-39821.
The severity of CVE-2022-39821 is high, with a CVSS score of 7.5.
The NOKIA 1350 OMS R14.2 is affected by CVE-2022-39821.
CVE-2022-39821 is a vulnerability in the NOKIA 1350 OMS R14.2 web application that allows the insertion of sensitive information into an application log file, including cleartext user credentials.
At the moment, there is no specific solution available for CVE-2022-39821. It is recommended to follow the vendor's security advisories for any updates or patches.