Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.7epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:L
Affected products
AVEVA · PI to CONNECT Agent