CVE-2024-25011 — Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability

CVE-2024-25011

Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability PUBLISHED

Description (CNA)

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue.

Affected (CNA)

Vendor / product	Versions
Ericsson / Ericsson Catalog Manager	affected 0 through 22.6
Ericsson / Ericsson Order Care	affected 0 through 22.6

CWE

CWE-200

References

https://www.ericsson.com/en/about-us/security/psirt/cve-2024-25011

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.