CoreCVE
Back

MEDIUM

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072

Published Sep 5, 2023

Description

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-209

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner talos
Published Sep 5, 2023
Updated Feb 13, 2025
Reserved Jun 13, 2023
Link CVE-2023-35124

CISA Vulnrichment

Updated Sep 26, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-35124

Red Hat

No data

ENISA EUVD

Assigner talos
Published Sep 5, 2023
Updated Feb 13, 2025
Link EUVD-2023-39157

GitHub

No data