An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attac...
Vendor
Blue Planet vulnerabilities
2 published CVES affecting Blue Planet, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Inventory 1
- Inventory (BPI) 1
- Orchestration 1
- Orchestration (BPO) 1
- Route Optimization & Analysis 1
- Route Optimization and Analysis (ROA) 1
- Unified Assurance & Analytics 1
- Unified Assurance and Analytics (UAA) 1
Latest Blue Planet CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 0.66%
-
HighCVSS 8.0 EPSS 0.45%
In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation. Only products using SAML authentication are affected. Blue Planet® has released software updates that address this vulnerability for the affected products. Custo...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.