Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-29463

The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.

Published

2023-09-12T17:15:09.147

Last Modified

2024-11-21T07:57:06.420

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-287
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application rockwellautomation pavilion8 < 5.20 Yes
References