CVE-2023-32271 - An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072

Back Back to CVE browser

MEDIUM

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072

Published Sep 5, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 1.02%

Description

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

Vendor Open Automation Software Product OAS Platform Default
n/a
- Version
  v18.00.0072
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Open Automation Software

OAS Platform

n/a

Version	Status	Constraints
v18.00.0072	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1774
ExploitTechnical DescriptionThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1774
ExploitTechnical DescriptionThird Party Advisory

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1774		ExploitTechnical DescriptionThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1774		ExploitTechnical DescriptionThird Party Advisory