CIENA

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products.

In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations.

An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed.

In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation.

Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication.