CVE-2021-38431

Publication date

2021-10-15 12:29:48

Family

icscert

State

PUBLISHED

Description

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.