Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-79689
HistorySep 21, 2023 - 12:00 a.m.

Rockwell Automation Pavilion8 License Issue Vulnerability

2023-09-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
rockwell automation
pavilion8
authorization
vulnerability
jmx console
authentication
attacker
session count
log out

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Rockwell Automation Pavilion8 is a model prediction console from Rockwell Automation. Rockwell Automation Pavilion8 suffers from an authorization issue vulnerability that stems from the fact that the JMX Console is publicly available to users and does not require authentication. An attacker could use this vulnerability to retrieve the session count of another user or log the user out of their session.

CPENameOperatorVersion
rockwell automation pavilion8lt5.20

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for CNVD-2023-79689