Description (CNA)
The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / Pavilion8 | affected <5.20 |
CWE
CWE-287
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.