description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system.
problem types: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
affected:
{
product: SINEC NMS
vendor: Siemens
versions:
status: affected, version: All versions < V1.0 SP2 Update 1
}