Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.
Credits
Spark NZ
Radu Balaci and Meghna Patel from Bell Mobility (Canada)
