An information disclosure vulnerability exists in the OAS...
Moderate severity
Unreviewed
Published
Sep 5, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Sep 5, 2023
Published to the GitHub Advisory Database
Sep 5, 2023
Last updated
Apr 4, 2024
An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.
References