Siemens SIMATIC RTLS Locating Manager Log Information Disclosure Vulnerability

SIMATIC RTLS Locating Manager is used to configure, operate, and maintain SIMATIC RTLS units, a real-time wireless location system that provides location solutions.A log information disclosure vulnerability exists in Siemens SIMATIC RTLS Locating Manager, which stems from the fact that applications can log files with sensitive data, such as user names and passwords. A local attacker with access to the log file could use this information to launch further attacks.