CVE-2021-28485

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Sep 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-284886.5Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons CVE-2021-284908.8In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.CVE-2021-284924.9Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.CVE-2021-284937.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be ab CVE-2021-284948.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication i CVE-2021-284959.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authenticat CVE-2021-284966.5On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for CVE-2021-284977.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell m CVE-2021-284987.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text co CVE-2021-284995.5In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text c CVE-2021-285007.8An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could CVE-2021-285017.8An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could