high7.8
CVE-2024-1156
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentia…
Impact
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Data Record Ad | through 2.0.1 |
| Emerson | Flexlogger | through 2022_q3 |
| Emerson | G Web Development Software | through 2022_q3 |
| Emerson | Labview Nxg | Version 5.1 |
| Emerson | Specification Compliance Manager | through 2023_q4 |
| Emerson | Static Test Software Suite | through 1.2 |
| Emerson | Sts Software Bundle | through 21.0 |
| Emerson | Systemlink Server | before 2024_q1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html