Lucene search
HistoryNov 04, 2022 - 4:15 p.m.
CVE-2022-27893
foundry magritte
osisoft-pi-web-connector
authentication logging
vulnerability
resolved
4.2 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
12.7%
The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.
Affected configurations
Node
osisoft-pi-web-connector_projectosisoft-pi-web-connectorRange0.15.0–0.44.0foundry_magritte
4.2 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2022-27893