Description (CNA)
CVE-2024-6078 IMPACT An improper authentication vulnerability exists in the affected product, which could allow a malicious user to generate cookies for any user ID without the use of a username or password. If exploited, a malicious user could take over the account of a legitimate user. The malicious user would be able to view and modify data stored in the cloud.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / DataMosaix™ | affected 7.07 |
CWE
CWE-287
References
ADP enrichment
No English description supplied.
No references supplied.