PT-2018-18134 · Osisoft · Osisoft Pi Data Archive
CVE-2018-7529
·
Publicado
2018-03-14
·
Atualizado
2019-10-09
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
OSIsoft PI Data Archive versions prior to 2018
Description
A Deserialization of Untrusted Data issue allows unauthenticated users to modify deserialized data, potentially sending custom requests that crash the server.
Recommendations
For OSIsoft PI Data Archive versions prior to 2018, update to a version newer than 2017 to resolve the issue.
Correção
Deserialization of Untrusted Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Osisoft Pi Data Archive