Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pavilion8 Security Misconfiguration Vulnerability
Vulnerability Description
The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
认证机制不恰当
Vulnerability Title
Rockwell Automation Pavilion8 授权问题漏洞
Vulnerability Description
Rockwell Automation Pavilion8是美国罗克韦尔（Rockwell Automation）公司的一个模型预测控制台。 Rockwell Automation Pavilion8 5.17版本存在授权问题漏洞，该漏洞源于JMX Console向用户公开，且不需要身份验证。攻击者可利用该漏洞检索其他用户的会话数或将用户从其会话中注销。
CVSS Information
N/A
Vulnerability Type
N/A