PT-2017-19098 · Osisoft+2 · Osisoft Pi Integrator For Business Analytics+4

Publicado 2017-08-14 · Atualizado 2019-10-03 · CVE-2017-9653

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2 OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1 OSIsoft PI Integrator for SAP HANA versions prior to 2017

Description An issue with improper authorization was found, allowing an attacker to gain privileged access to the system without authorization.

Recommendations For OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2, update to version 2016 R2 or later. For OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1, update to version 2016 R2 SP1 or later. For OSIsoft PI Integrator for SAP HANA versions prior to 2017, update to version 2017 or later.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2017-9653

Produtos afetados

Azure

Osisoft Pi Integrator For Business Analytics

Osisoft Pi Integrator For Microsoft Azure

Osisoft Pi Integrator For Sap Hana

Sap Hana

Referências · 5

• https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01 · Nota
• http://securityfocus.com/bid/100212 · Nota
• https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-9653 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9653 · Nota de Segurança