medium6.9
CVE-2021-43549
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a maliciou…
Impact
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided with false information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osisoft | Pi Web Api | through 2019 |