Information Leakage Vulnerability in Opcenter Execution Core by Siemens

CVE-2020-28390

What is CVE-2020-28390?

An information leakage vulnerability exists in Siemens Opcenter Execution Core versions 8.2 and 8.3. The issue arises from insufficient protection of web client session storage, allowing a local attacker with access to potentially disclose the passwords of users currently logged in. This vulnerability highlights the importance of securing session storage against unauthorized access to mitigate risks associated to sensitive information exposure.

References