2 matches found
CVE-2015-1013
CVE-2015-1013 affects OSIsoft PI AF 2.6/2.7 and PI SQL for AF 2.1.2.19. The root cause is an incorrect default permission where the PI SQL (AF) Trusted Users group may include the Everyone account, enabling remote authenticated users to bypass command restrictions by issuing SQL statements. Impac...
CVE-2009-0209
CVE-2009-0209 concerns OSIsoft PI Server prior to 3.4.380.x, where the default authentication mechanism is insecure and does not encrypt credentials, enabling a remote attacker to read or modify information in PI Server databases via unspecified vectors. The vulnerability is tied to the PI Server...