PT-2019-13382 · Osisoft · Osisoft Pi Web Api
CVE-2019-13516
·
Publicado
2019-08-15
·
Atualizado
2023-03-08
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OSIsoft PI Web API versions prior to the fixed version
Description
The issue is related to a cross-site request forgery protection setting that has not taken effect, making the affected product vulnerable to a direct attack.
Recommendations
For versions prior to the fixed version, update to the fixed version to resolve the issue.
As a temporary workaround, consider implementing additional security measures to protect against cross-site request forgery attacks until a patch is available.
Correção
CSRF
Protection Mechanism Failure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Osisoft Pi Web Api