8.8
High
CVE-2023-29463 The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require…
Description
The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pavilion8 5.20 | earliest → < 5.20 | 5.20 |