CVE-2025-59178:详情

CVE-2025-59178

2026-07-27
15h16 +00:00
A01-Broken Access Control
2026-09-29
19h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

参考资料