Description (CNA)
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided with false information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OSIsoft / PI Web API | affected All versions through 2019 SPI |
CWE
CWE-79
References
ADP enrichment
No English description supplied.