Описание
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2017 (включая)
Одно из
cpe:2.3:a:osisoft:pi_data_archive:*:*:*:*:*:*:*:*
cpe:2.3:a:osisoft:pi_data_archive:2017:r2:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.00611
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
CWE-502
CWE-502
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.
EPSS
Процентиль: 69%
0.00611
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
CWE-502
CWE-502