CVEvulnerability

CVE-2022-46407

4.8 MEDIUM Published 2023-06-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601

Description

Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to exploit the vulnerability

Affected configurations

• ericsson network manager (< 22.2)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References