Описание
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2017 (включая)
Одно из
cpe:2.3:a:osisoft:pi_data_archive:*:*:*:*:*:*:*:*
cpe:2.3:a:osisoft:pi_data_archive:2017:r2:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00037
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-276
CWE-276
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.
EPSS
Процентиль: 11%
0.00037
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-276
CWE-276