medium6.6
CVE-2021-32942
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user…
Impact
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aveva | Intouch 2017 | All versions |
| Aveva | Intouch 2020 | All versions Version r2 |