CVE Catalog

CVE-2017-9653

Critical
Published: Translated: NVD NIST

Summary

An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized.

Risk Assessment

The organization is at risk of unauthorized access to sensitive data and system functions, which could lead to serious security breaches.

Recommendation

It is recommended to update to the latest versions of the software to eliminate the authorization vulnerability and implement additional security measures.

Original NVD description (English source)

An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS