DataEdgePlatform DataMosaix™ Private Cloud vulnerabilities
3 known vulnerabilities in DataEdgePlatform DataMosaix™ Private Cloud from Rockwell Automation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
DataEdgePlatform DataMosaix™ Private Cloud: Improper Access Control
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project.
- 8.7 High severity
DataEdgePlatform DataMosaix™ Private Cloud: Use of Hard-coded Credentials
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data.
- 7.0 High severity
DataEdgePlatform DataMosaix™ Private Cloud: Exposure of Sensitive Information to an Unauthorized Actor
A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A thr