Описание
Duplicate Advisory: Authentication Bypass by Spoofing in OPC UA .NET Standard Stack
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-4rcc-7pg7-f57f. This link is maintained to preserve external references.
Original Description
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.
Пакеты
Наименование
OPCFoundation.NetStandard.Opc.Ua
nuget
Затронутые версииВерсия исправления
< 1.5.374.158
1.5.374.158
5.3 Medium
CVSS3
Дефекты
CWE-290
CWE-305
5.3 Medium
CVSS3
Дефекты
CWE-290
CWE-305