Ericsson Network Manager prior to 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application.
ericsson network manager