Description
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | DataEdgePlatform DataMosaix™ Private Cloud | <=7.07 | — |
Advisories 1
- ICSA-24-284-15 Rockwell Automation DataMosaix Private Cloud CISA ICS & IT advisories · Oct 10, 2024