CVE-2024-1156 — NI / SystemLink Server

Description (CNA)

Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges.

Affected (CNA)

Vendor / product	Versions
NI / SystemLink Server	affected 0 through 2023 Q3
NI / FlexLogger	affected 0 through 2022 Q3

CWE

CWE-276

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html

ADP enrichment

CVE

No English description supplied.

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html

CISA-ADP

No English description supplied.

No references supplied.