CVE-2021-23173 ICSMA-22-006-01 Philips Engage Software

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data...

CVE-2021-23173

Philips Engage Software (Engage EC platform) is affected by CVE-2021-23173 due to improper access control (CWE-284). Affected versions are Engage Software 6.2.1 and earlier; an authenticated user may gain unauthorized access to sensitive data. The ICS advisory notes remote exploitation potential ...