CVE-2025-59178 : 詳細

CVE-2025-59178

2026-07-27
15h16 +00:00
A01-Broken Access Control
2026-09-29
19h10 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

参考資料