CVE-2024-42493 — Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor

CVE-2024-42493

Dorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized Actor PUBLISHED

Description (CNA)

Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers and the rendered JavaScript prior to user login.

Affected (CNA)

Vendor / product	Versions
Dorsett Controls / InfoScan	affected v1.32; affected v1.33; affected v1.35

CWE

CWE-200

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
https://portal.dtscada.com/#/security-bulletins?bulletin=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.