PT-2026-79266 · Ptc · Windchill Pdmlink+1
CVSS v4.0
7.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/AU:Y/R:U/V:D/RE:M/U:Red |
Name of the Vulnerable Software and Affected Versions
PTC Windchill PDMLink (affected versions not specified)
PTC FlexPLM (affected versions not specified)
Description
A Server-Side Request Forgery (SSRF) issue exists where the system may be manipulated into making unauthorized requests to internal or external resources. This occurs through the deserialization of untrusted data, a process where malicious data is converted back into an object, allowing the attacker to trigger unintended server actions.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Deserialization of Untrusted Data
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Flexplm
Windchill Pdmlink