CVE-2020-25167: OSIsoft PI Vision Incorrect Authorization
First published: Mon Apr 18 2022(Updated: )
OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OSIsoft PI Vision | <3.5.0 | |
| OSIsoft CRITICAL INFRASTRUCTURE SECTORS: Multiple | ||
| OSIsoft COUNTRIES/AREAS DEPLOYED: Worldwide | ||
| OSIsoft COMPANY HEADQUARTERS LOCATION: United States |
Remedy
OSIsoft released PI Vision 2020 Version 3.5.0, which resolves these vulnerabilities. Recommended defensive measures and related configuration settings are described on the OSIsoft customer portal (Login required).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this OSIsoft PI Vision issue?
The vulnerability ID for this issue is CVE-2020-25167.
What is the title of this OSIsoft PI Vision vulnerability?
The title of this vulnerability is "OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute."
What is the severity rating of CVE-2020-25167?
The severity rating of CVE-2020-25167 is medium with a score of 6.5.
Which versions of OSIsoft PI Vision are affected by this vulnerability?
OSIsoft PI Vision 2020 versions prior to 3.5.0 are affected by this vulnerability.
How can this vulnerability be fixed?
To fix this vulnerability, update OSIsoft PI Vision to version 3.5.0 or later.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/severity
- agent/references
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/trending
- agent/tags
- agent/source
- vendor/osisoft
- canonical/osisoft pi vision
- canonical/osisoft critical infrastructure sectors: multiple
- canonical/osisoft countries/areas deployed: worldwide
- canonical/osisoft company headquarters location: united states