medium5.5
CVE-2023-5136
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure.
Impact
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ni | Topografix Data Plugin | Version 2023 |
| Ni | Diadem | Versions 2014, 2015, 2017, 2018, 2019, 2020 |
| Ni | Veristand | Versions 2013, 2014, 2015, 2016, 2017, 2018 |
| Ni | Flexlogger | Versions 2018, 2019, 2020, 2021, 2022, 2023 |