CVE-2021-23173

Philips Engage Software (Engage EC platform) is affected by CVE-2021-23173 due to improper access control (CWE-284). Affected versions are Engage Software 6.2.1 and earlier; an authenticated user may gain unauthorized access to sensitive data. The ICS advisory notes remote exploitation potential ...