PTC Windchill Risk and Reliability Critical Access Control Bypass and Unverified Password Change Vulnerability

Vulnerability Overview Vulnerability Name: Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition Vulnerability Description: This vulnerability allows unauthorized users to bypass access controls and access resources. Specifically manifested as: - CWE-284 - Improper Access Control: The software fails to properly restrict access to resources. - CWE-620 - Unverified Password Change: The application allows users to change their password without verifying the original/current password, potentially leading to account takeover. Affected Scope Affected Versions: Windchill Risk and Reliability Enterprise Edition (Formerly Relex) 11.1 through 13.1 Excluded Versions: - Windchill Risk and Reliability (WRR) Team Edition - Windchill - FlexPLM Remediation Current Status: No CVE ID has been issued yet; no specific remediation solution is currently available. Recommended Actions: Users should closely monitor updates and patches released by PTC and apply them promptly to fix this vulnerability. Related CWEs CWE-284 - Improper Access Control: The software fails to properly restrict access to resources. CWE-620 - Unverified Password Change: The application allows users to change their password without verifying the original/current password. Additional Information Article Number: CS474848 Modification Date: August 14, 2016 Other Page Content Knowledge Base Access: Login is required to read the full content, discover related content, and search content sources. Contact Us: Options include the support portal, contact experts, join the PTC community, training, and support. Explore PTC: Provides information about PTC, products, learning connectors, careers, leadership, investor relations, news, partners, events, and global locations. Code Block No POC or Exploit Code --- The above is a summary of the key vulnerability information from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

PTC Windchill Risk and Reliability Critical Access Control Bypass and Unverified Password Change Vulnerability