CVE-2022-39821: Nokia 1350 Optical Management System

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.

Affected products

• Nokia 1350 Optical Management System: version 14.2 only

Published 2022-09-13. Last modified 2026-06-17.