Description
A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Opcenter Execution Core | V8.2, V8.3 | — |
Advisories 1
- ICSA-20-196-07 Siemens Opcenter Execution Core (Update B) CISA ICS & IT advisories · Aug 11, 2020