Information Disclosure Vulnerability in SINEMA Remote Connect Server by Siemens

CVE-2024-39875

What is CVE-2024-39875?

An information disclosure vulnerability has been identified in SINEMA Remote Connect Server, affecting all versions prior to V3.2 SP1. This vulnerability allows authenticated users with low privileges who possess the 'Manage own remote connections' permission to access sensitive information, including details about other users and their group memberships. This may lead to unauthorized visibility of user data, posing potential risks to user privacy and security.

References