Description (CNA)
The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys. This endpoint requires an Editor role to access and will display API keys for all users, including Administrators.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Opto 22 / groov View Server | affected R1.0a through R4.5d |
| Opto 22 / GRV-EPIC-PR1 Firmware | affected 0 through 4.0.3 |
| Opto 22 / GRV-EPIC-PR2 Firmware | affected 0 through 4.0.3 |
CWE
CWE-1230
References
- https://www.opto22.com/support/resources-tools/knowledgebase/kb91325
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-04.json
ADP enrichment
No English description supplied.
No references supplied.