Description
Ciena Navigator Network
Control Suite (NCS) contains an information exposure vulnerability in an
event-streaming API that does not properly enforce authentication. An
unauthenticated attacker with network access to the affected service could
access the event stream and potentially obtain sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ciena | Navigator NCS | 7.2 and any older release, 7.2-P01 through 7.2-P07, 8.0, 8.0-P01 through 8.0-P06A, 8.1, 8.1-P01 through 8.1-P06, 8.2, 8.2-P01 through 8.2-P06, 9.0, 9.0-P01 through 9.0-P05A, 9.1, 9.1-P01 through 9.1-P05, 9.2, 9.2-P01 through 9.2-P02, 10.0, 10.0-P01 through 10.0-P01B | — |