CVE-2023-35124

Name of the Vulnerable Software and Affected Versions Open Automation Software OAS Platform version 18.00.0072

Description An information disclosure issue exists in the OAS Engine configuration management functionality. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this issue.

Recommendations For Open Automation Software OAS Platform version 18.00.0072, consider restricting access to the OAS Engine configuration management functionality until a patch is available. As a temporary workaround, avoid using the vulnerable configuration management functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.