PT-2018-18108
CVE-2018-7500
·
Publicado
2018-03-14
·
Atualizado
2019-10-09
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OSIsoft PI Web API versions 2017 R2 and prior
Description
A Permissions, Privileges, and Access Controls issue was discovered, allowing privileges to be escalated. This escalation gives attackers access to the PI System via the service account.
Recommendations
For OSIsoft PI Web API versions 2017 R2 and prior, update to a version later than 2017 R2 to resolve the issue.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾