ThinManager® ThinServer Vulnerability Allows Sensitive Information Disclosure
CVE-2024-7986
7.5HIGH
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 23 August 2024
What is CVE-2024-7986?
A vulnerability in Rockwell Automation's ThinManager ThinServer allows unauthorized access to sensitive information. By exploiting this flaw, attackers can leverage the ThinServer service to read arbitrary files. This is achieved by creating a junction that points to the target directory, exposing confidential data and potentially leading to further security issues. Organizations using ThinManager should remain vigilant and apply necessary security measures to mitigate risks associated with this vulnerability.
Affected Version(s)
ThinManager® ThinServer™ 11.1.0-11.1.7 11.2.0-11.2.8 12.0.0-12.0.6 12.1.0-12.1.7 13.0.0-13.0.4 13.1.0-13.1.2 13.2.0-13.2.1