Vulnerability CVE-2024-38879


Published: 2024-08-02

Description:
A vulnerability has been identified in Omnivise T3000 Application Server (All versions). The affected system exposes the port of an internal application on the public network interface allowing an attacker to circumvent authentication and directly access the exposed application.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download
Andreas Kolbeck
14.11.2024

Type:

CWE-20

(Improper Input Validation)

 References:
https://cert-portal.siemens.com/productcert/html/ssa-857368.html

Copyright 2024, cxsecurity.com

 

Back to Top