PTC ThingWorx Password Disclosure / Cross Site Scripting Vulnerabilities

PTC ThingWorx suffers from cross site scripting and password disclosure vulnerabilities. Versions affected include 6.5 through 7.4, 8.0.x, 8.1.x, and 8.2.x. ======================================================================= title: Password disclosure vulnerability & XSS product: PTC ThingWor...

CVE-2018-17216

PTC ThingWorx Platform 6.5–8.2 is affected by a password hash exposure vulnerability (credential exposure to privileged users). Connected sources enumerate affected versions as 6.5–7.4, 8.0.x, 8.1.x, and 8.2.x, and also reference related XSS/password-disclosure issues in the same family. The root...