ThinManager® ThinServer Vulnerability Allows Sensitive Information Disclosure

CVE-2024-7986

Summary

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.

References