medium4.3
CVE-2021-38431
An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.
Impact
An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess Scada | through 9.0.3 |