CVE-2015-2166

Name of the Vulnerable Software and Affected Versions Ericsson Drutt Mobile Service Delivery Platform (MSDP) versions 4 through 6

Description The issue allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI, which is a directory traversal vulnerability in the Instance Monitor.

Recommendations For versions 4 through 6, consider restricting access to the Instance Monitor until a fix is available. As a temporary workaround, avoid using the ..%2f sequence in the default URI to minimize the risk of exploitation.