CVE-2024-8530 — Missing Authentication for Critical Function in Electric Data Center Expert

CWE-306 — Missing Authentication for Critical Function3 documents3 sources

Severity

5.9MEDIUMNVD

EPSS

0.2%

top 57.79%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider Electric Data Center Expert

Timeline

PublishedOct 11

Description

CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures” archive is accessed directly by HTTPS.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

▶CVEListV5schneider_electric/data_center_expertVersions 8.1.1.3 and prior

🔴Vulnerability Details

GHSA

GHSA-j926-cg89-w6qr: CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcap↗2024-10-11

▶

CVEList

CVE-2024-8530: CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcap↗2024-10-11

▶