CVE Catalog
CVE-2017-5158
CriticalSummary
An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters.
Risk Assessment
The exposure of credentials may lead to unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of the software and to monitor and restrict access to URL parameters that may expose credentials.
Original NVD description (English source)
An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified.