VulnerabilityDeferred

CVE-2024-25011

Authentication checks can be configured to remediate the information disclosure issue.

MEDIUM 5.3EPSS 0.27%

Does this matter?

Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.

Description

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.27% probability · 20th percentile
CISA KEV: Not listed
Weakness: CWE-200
Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

References

https://www.ericsson.com/en/about-us/security/psirt/cve-2024-25011

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.