CVE-2021-28488

Name of the Vulnerable Software and Affected Versions Ericsson Network Manager versions prior to 21.2

Description The issue concerns incorrect access-control behavior, affecting users with highly privileged roles. It allows users within the same AMOS authorization group to retrieve managed-network data not intended for their access, specifically data restricted to a subset of the group.

Recommendations For Ericsson Network Manager versions prior to 21.2, update to version 21.2 or later to resolve the issue.