8.8
Élevée
CVE-2023-29463 The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require…
Description
The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pavilion8 5.20 | premières → < 5.20 | 5.20 |