{"id":"CVE-2025-24816","aliases":["EUVD-2025-210370","GHSA-rr5r-rhqx-65gr"],"status":"published","title":"An Improper Access Control vulnerability in Nokia MantaRay NM","description":"Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00201,"percentile":0.1006,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2026-06-30T08:58:29Z","modified":"2026-09-29T19:10:00Z","products":[{"vendor":"nokia","product":"mantaray nm"},{"vendor":"nokia","product":"mantaray_nm"}],"references":[{"url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24816/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24816"},{"url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24816"},{"url":"https://github.com/advisories/GHSA-rr5r-rhqx-65gr"}],"sources":{"cve":[{"id":"CVE-2025-24816","title":"An Improper Access Control vulnerability in Nokia MantaRay NM","description":"Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.","status":"published","published":"2026-06-30T08:58:29.484Z","modified":"2026-06-30T13:30:45.148Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:32:44.11109Z"}],"euvd":[{"id":"EUVD-2025-210370","description":"Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.","status":"published","published":"2026-06-30T08:58:29Z","modified":"2026-06-30T13:30:45Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:21.627235Z"}],"ghsa":[{"id":"GHSA-rr5r-rhqx-65gr","title":"Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient...","description":"Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.","status":"published","published":"2026-06-30T12:31:50Z","modified":"2026-06-30T15:31:48Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:09:06.582219Z"}],"nvd":[{"id":"CVE-2025-24816","description":"Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.","status":"published","published":"2026-06-30T10:16:33.617Z","modified":"2026-09-29T19:10:00.16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:12:02.535029Z"}]}}