An issue exists in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated malicious user to read arbitrary files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
nokia network functions manager for transport 19.9 |
Vulmon