Описание
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
Ссылки
- Permissions Required
- Broken LinkVendor Advisory
- Permissions Required
- Broken LinkVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:tridium:niagara_ax:*:*:*:*:*:*:*:*
EPSS
Процентиль: 31%
0.00119
Низкий
7.8 High
CVSS2
Дефекты
CWE-522
Связанные уязвимости
github
больше 3 лет назад
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
EPSS
Процентиль: 31%
0.00119
Низкий
7.8 High
CVSS2
Дефекты
CWE-522