Cross site request forgery (csrf)

2018-05-2515:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.0%

JSON

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.

CPENameOperatorVersion
pi_coresighteq<= 2016-r2

CPE	Name	Operator	Version
	pi_coresight	eq	<= 2016-r2

References

www.securityfocus.com/bid/99540

ics-cert.us-cert.gov/advisories/ICSA-17-192-04

techsupport.osisoft.com/Troubleshooting/Alerts/AL00320