CVE-2024-25011

CVE-2024-25011CVE-2024-25011

Description

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue.

Scoring

CVSS 5.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Last modified2026-11-09
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.