CVEvulnerability

CVE-2025-24816

6.5 MEDIUM Published 2026-06-30 Modified 2026-09-29 Official page ↗
Status
Analyzed
Published
2026-06-30
Last modified
2026-09-29
Assigner
b48c3b8f-639e-4c16-8725-497bc411dad0
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-284

Description

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

Affected configurations

• nokia mantaray nm (< 25R2-NM)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References