PT-2020-9948 · Osisoft · Osisoft Pi System+1

Published 2020-01-15 · Updated 2020-07-25 · CVE-2019-18244

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OSIsoft PI System (affected versions not specified)

Description A local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The issue is related to the handling of log files in the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-18244

Affected Products

Osisoft Pi System

Pi Vision

References · 3

• https://osv.dev/vulnerability/CVE-2019-18244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18244 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02 · Note