CVE-2025-59178

Ericsson Packet Core Controller (PCC) versions prior to 1.39 are vulnerable to an exposure of sensitive system information, enabling attackers to enumerate other users within the system through its Configuration Management feature. This vulnerability could lead to unauthorized access or further attacks by revealing user identities. Organizations utilizing affected versions of PCC should prioritize patching to mitigate potential risks associated with user enumeration.