high8.8
CVE-2023-29463
The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication.
Impact
The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Pavilion8 | before 5.20 |