CyberRota Analysis
AI-GeneratedCertain releases of Ciena Navigator Network Control Suite, Manage Control Plan, and Blue Planet products are vulnerable to an authentication bypass due to improper handling of HTTP request paths and headers. This flaw allows unauthenticated attackers to manipulate requests, potentially compromising system integrity and evading audit logging. Organizations using these products should prioritize immediate remediation to mitigate the risk of unauthorized access and data breaches.
Original NVD Description
An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate requests in a manner that bypasses authentication and associated audit logging controls.