PT-2017-19098 · Osisoft+2 · Osisoft Pi Integrator For Business Analytics+4

Published 2017-08-14 · Updated 2019-10-03 · CVE-2017-9653

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2 OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1 OSIsoft PI Integrator for SAP HANA versions prior to 2017

Description An issue with improper authorization was found, allowing an attacker to gain privileged access to the system without authorization.

Recommendations For OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2, update to version 2016 R2 or later. For OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1, update to version 2016 R2 SP1 or later. For OSIsoft PI Integrator for SAP HANA versions prior to 2017, update to version 2017 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2017-9653

Affected Products

Azure

Osisoft Pi Integrator For Business Analytics

Osisoft Pi Integrator For Microsoft Azure

Osisoft Pi Integrator For Sap Hana

Sap Hana

References · 5

• https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9653 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9653 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01 · Note
• http://securityfocus.com/bid/100212 · Note