Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-6078

Rockwell Automation Authentication Bypass Vulnerability in DataMosaix™

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

CVE-2024-6078 IMPACT An improper authentication vulnerability exists in the affected product, which could allow a malicious user to generate cookies for any user ID without the use of a username or password. If exploited, a malicious user could take over the account of a legitimate user. The malicious user would be able to view and modify data stored in the cloud.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation DataMosaix™

Default version status: unaffected

  • 7.07affected

References