{"id":126956,"date":"2025-09-19T15:53:47","date_gmt":"2025-09-19T15:53:47","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=126956"},"modified":"2025-09-19T15:53:49","modified_gmt":"2025-09-19T15:53:49","slug":"nokia-cbis-ncs-manager-api-vulnerability","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/","title":{"rendered":"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication"},"content":{"rendered":"\n

A critical authentication bypass vulnerability has emerged in Nokia’s CloudBand Infrastructure Software (CBIS) and Nokia Container Service (NCS) Manager API, designated as CVE-2023-49564.<\/p>\n\n\n\n

This high-severity flaw, scoring 9.6 on the CVSS v3.1 scale, enables unauthorized attackers to circumvent authentication mechanisms through specially crafted HTTP headers, potentially granting complete access to restricted API endpoints without valid credentials.<\/p>\n\n\n\n

The vulnerability affects CBIS 22 and NCS 22.12 versions, impacting enterprises, service providers, and public sector organizations utilizing Nokia’s cloud and network infrastructure solutions.<\/p>\n\n\n\n

The flaw was publicly disclosed on September 18, 2025, following discovery by Orange Cert researchers who identified the security gap during routine security assessments.<\/p>\n\n\n\n

Nokia security researchers identified<\/a> the root cause as a weak verification mechanism embedded within the authentication implementation of the Nginx Podman container running on the CBIS\/NCS Manager host machine.<\/p>\n\n\n\n

This architectural weakness allows threat actors to manipulate HTTP header fields to trick the authentication system into believing a request is legitimate.<\/p>\n\n\n\n

The exploitation<\/a> vector requires adjacent network access (CVSS AV:A), making it particularly concerning for enterprise environments where attackers might already have gained initial network foothold.<\/p>\n\n\n\n

Once exploited, the vulnerability provides complete compromise capabilities with high confidentiality, integrity, and availability impact, allowing attackers to access sensitive configuration data, modify system settings, and potentially disrupt network operations.<\/p>\n\n\n\n

Technical Attack Mechanism<\/strong><\/h2>\n\n\n\n

The authentication bypass operates through header manipulation targeting the Nginx container’s verification logic.<\/p>\n\n\n\n

When processing API requests, the system fails to properly validate authentication tokens embedded in HTTP headers, creating an opportunity for crafted requests to bypass security controls.<\/p>\n\n\n\n

The vulnerability allows unauthenticated users to reach sensitive endpoints<\/a> that should require administrative privileges.<\/p>\n\n\n\n

Vulnerability Details<\/th>Information<\/th><\/tr><\/thead>
CVE ID<\/td>CVE-2023-49564<\/td><\/tr>
CVSS Score<\/td>9.6 (Critical)<\/td><\/tr>
Attack Vector<\/td>Adjacent Network<\/td><\/tr>
Affected Products<\/td>CBIS 22, NCS 22.12<\/td><\/tr>
Fix Versions<\/td>CBIS 22 FP1 MP1.2, NCS 22.12 MP3<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Organizations can partially mitigate risks by implementing external firewall<\/a> restrictions on management network access while applying the patches provided in CBIS 22 FP1 MP1.2 and NCS 22.12 MP3 versions.<\/p>\n\n\n\n

Find this Story Interesting! Follow us on\u00a0Google News<\/a>,\u00a0LinkedIn<\/a>,\u00a0and\u00a0X<\/a>\u00a0to Get More Instant Updates<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"

A critical authentication bypass vulnerability has emerged in Nokia’s CloudBand Infrastructure Software (CBIS) and Nokia Container Service (NCS) Manager API, designated as CVE-2023-49564. This high-severity flaw, scoring 9.6 on the CVSS v3.1 scale, enables unauthorized attackers to circumvent authentication mechanisms through specially crafted HTTP headers, potentially granting complete access to restricted API endpoints without valid […]<\/p>\n","protected":false},"author":6,"featured_media":127074,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,48],"tags":[149,151],"class_list":{"0":"post-126956","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-threats","9":"tag-cyber-security","10":"tag-cyber-security-news"},"yoast_head":"\nNokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication - Cyber Security News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication\" \/>\n<meta property=\"og:description\" content=\"A critical authentication bypass vulnerability has emerged in Nokia’s CloudBand Infrastructure Software (CBIS) and Nokia Container Service (NCS) Manager API, designated as CVE-2023-49564. This high-severity flaw, scoring 9.6 on the CVSS v3.1 scale, enables unauthorized attackers to circumvent authentication mechanisms through specially crafted HTTP headers, potentially granting complete access to restricted API endpoints without valid […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-19T15:53:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-19T15:53:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp\" \/>\n<meta name=\"author\" content=\"Tushar Subhra Dutta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tushar Subhra Dutta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication - Cyber Security News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication","og_description":"A critical authentication bypass vulnerability has emerged in Nokia’s CloudBand Infrastructure Software (CBIS) and Nokia Container Service (NCS) Manager API, designated as CVE-2023-49564. This high-severity flaw, scoring 9.6 on the CVSS v3.1 scale, enables unauthorized attackers to circumvent authentication mechanisms through specially crafted HTTP headers, potentially granting complete access to restricted API endpoints without valid […]","og_url":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-09-19T15:53:47+00:00","article_modified_time":"2025-09-19T15:53:49+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp","type":"","width":"","height":""}],"author":"Tushar Subhra Dutta","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Tushar Subhra Dutta","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/"},"author":{"name":"Tushar Subhra Dutta","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c"},"headline":"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication","datePublished":"2025-09-19T15:53:47+00:00","dateModified":"2025-09-19T15:53:49+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/"},"wordCount":346,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news"],"articleSection":["Cyber Security News","Threats"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/","url":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/","name":"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication - Cyber Security News","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-09-19T15:53:47+00:00","dateModified":"2025-09-19T15:53:49+00:00","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#primaryimage","url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/nokia-cbis-ncs-manager-api-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"Nokia CBIS\/NCS Manager API Vulnerability Let Attackers Bypass Authentication"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World's #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c","name":"Tushar Subhra Dutta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","caption":"Tushar Subhra Dutta"},"description":"Tushar is a senior cybersecurity and breach reporter. He specializes in covering cybersecurity news, trends, and emerging threats, data breaches, and malware attacks. With years of experience, he brings clarity and depth to complex security topics.","url":"https:\/\/cybersecuritynews.com\/author\/tushar\/"}]}},"jetpack_featured_media_url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjxS8snuydtu3zfEyYsQRJ8wm-XVqoO3y4ZGoavMx0s3B37fIe-EZ4Zk0MIOYUO9wTZ3KYOx5wyU1TqKykr06ZyBxYeO0d7Pbgmm4uayPVEDAvRrilllxYHNl6AZ941HbUhFT0HhSONSgo82T-j4OmsduMl4tCkK8QqziaJJiYApmdYHtHArIKLt_q_Tm0\/s16000\/Nokia%20CBIS%20-%20NCS%20Manager%20API%20Vulnerability%20Let%20Attackers%20Bypass%20Authentication.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/126956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=126956"}],"version-history":[{"count":2,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/126956\/revisions"}],"predecessor-version":[{"id":127149,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/126956\/revisions\/127149"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/127074"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=126956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=126956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=126956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}