Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AVEVA Edge 安全漏洞
Vulnerability Description
AVEVA Edge是英国剑维软件（AVEVA）公司的一款高度可扩展、灵活的 HMI/SCADA 软件。 AVEVA Edge 2020 R2版本存在安全漏洞，该漏洞源于其允许未经身份验证的参与者欺骗AVEVA Edge运行时泄露用户的Windows访问令牌为访问外部DB资源配置的帐户。
CVSS Information
N/A
Vulnerability Type
N/A