PT-2022-18264
CVE-2022-27169
·
تاريخ النشر
2022-05-25
·
تاريخ التحديث
2023-07-26
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Open Automation Software OAS Platform version 16.00.0112
Description
An information disclosure issue exists in the OAS Engine SecureBrowseFile functionality. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this issue.
Recommendations
For version 16.00.0112, consider restricting access to the SecureBrowseFile functionality until a patch is available. As a temporary workaround, avoid using the OAS Engine SecureBrowseFile functionality to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾