CVE-2022-39821

7.5 highEPSS 0.7%

High (7.5) in nokia 1350 optical management system. EPSS 0.7% chance of exploitation in the next 30 days.

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2022-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:1350_optical_management_system

References

https://www.gruppotim.it/it/footer/red-team.html
https://www.gruppotim.it/it/footer/red-team.html

Check your stack JSON