Password Hash Exposure in PTC ThingWorx Platform by PTC
CVE-2018-17216

6.5MEDIUM

Key Information:

Vendor

Ptc

Status
Thingworx Platform
Vendor
CVE Published:
1 October 2018

What is CVE-2018-17216?

A security issue exists in PTC ThingWorx Platform versions 6.5 through 8.2 that enables privileged users to access exposed password hashes. This vulnerability poses significant risks to data integrity and user confidentiality, requiring immediate attention to mitigate potential exploitation.

References

https://www.ptc.com/en/support/article?n=CS291004
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.