CVE-2021-32570

In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from certain log files. All AMOS users are considered to be highly privileged users in ENM system and all must be previously defined and authorized by the Security Administrator. Those users can access some log’s files, under a common path, and read information stored in the log’s files in order to conduct privilege escalation.

CVSS v3 4.9 MEDIUM

4.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ericsson.com	Vendor Advisory
https://www.gruppotim.it/it/footer/red-team.html	Third Party Advisory
https://www.ericsson.com	Vendor Advisory
https://www.gruppotim.it/it/footer/red-team.html	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ericsson:network_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 06:07

Type	Values Removed	Values Added
References	~~() https://www.ericsson.com - Vendor Advisory~~	() https://www.ericsson.com - Vendor Advisory
References	~~() https://www.gruppotim.it/it/footer/red-team.html - Third Party Advisory~~	() https://www.gruppotim.it/it/footer/red-team.html - Third Party Advisory

Information

Published : 2022-08-26 00:15

Updated : 2024-11-21 06:07

NVD link : CVE-2021-32570

Mitre link : CVE-2021-32570

CVE.ORG link : CVE-2021-32570

JSON object : View

Products Affected

ericsson

network_manager

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2021-32570", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2022-08-26T00:15:08.723", "references": [{"url": "https://www.ericsson.com", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.gruppotim.it/it/footer/red-team.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.ericsson.com", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.gruppotim.it/it/footer/red-team.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from certain log files. All AMOS users are considered to be highly privileged users in ENM system and all must be previously defined and authorized by the Security Administrator. Those users can access some log\u2019s files, under a common path, and read information stored in the log\u2019s files in order to conduct privilege escalation."}, {"lang": "es", "value": "En Ericsson Network Manager (ENM) versiones anteriores a 21.2, los usuarios que pertenecen al mismo grupo de autorizaci\u00f3n de AMOS pueden recuperar los datos de determinados archivos de registro. Todos los usuarios de AMOS son considerados usuarios altamente privilegiados en el sistema ENM y todos deben ser previamente definidos y autorizados por el Administrador de Seguridad. Estos usuarios pueden acceder a algunos archivos de registro, bajo una ruta com\u00fan, y leer la informaci\u00f3n almacenada en los archivos de registro con el fin de conducir una escalada de privilegios."}], "lastModified": "2024-11-21T06:07:17.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ericsson:network_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "944DF153-84C6-4258-A87E-DB1143B21DE4", "versionEndExcluding": "21.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}