Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w5xj-jgc6-7cv5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.

EPSS

Процентиль: 19%
0.00062
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
почти 11 лет назад

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.

EPSS

Процентиль: 19%
0.00062
Низкий

Дефекты

CWE-200