Description
CWE-306: Missing Authentication for Critical Function vulnerability exists that could
cause exposure of private data when an already generated “logcaptures” archive is accessed
directly by HTTPS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Data Center Expert | Versions 8.1.1.3 and prior | — |
Advisories 3
- ICSA-25-016-08 Schneider Electric Data Center Expert CISA ICS & IT advisories · Oct 8, 2024
- ICSA-24-289-02 Schneider Electric Data Center Expert CISA ICS & IT advisories · Oct 8, 2024
- SEVD-2024-282-01 Data Center Expert Schneider Electric CPCERT · Oct 8, 2024