Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-25011 EUVD-2024-22373GHSA-wh77-ghv3-2p79

Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability

Published Sep 18, 2025 · Updated Sep 18, 2025 · Assigned by ERIC

Description

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue.

Affected products

VendorProductAffectedFixed
Ericsson Ericsson Catalog Manager ≤ 22.6 —
Ericsson Ericsson Order Care ≤ 22.6 —

References