CVE-2024-41983: Medium severity SmartClient Opcenter QL Home (SC) vulnerability
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application displays SQL statement in the error messages encountered during the generation of reports using Cockpit tool.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41983?
CVE-2024-41983 has been rated with a high-severity level due to its potential impact on application data security.
How do I fix CVE-2024-41983?
To fix CVE-2024-41983, ensure you update all affected SmartClient modules to versions 2506 or later.
What versions of SmartClient are affected by CVE-2024-41983?
CVE-2024-41983 affects SmartClient Opcenter QL Home (SC), SOA Audit, and SOA Cockpit versions from 13.2 up to but not including 2506.
What type of vulnerability is CVE-2024-41983?
CVE-2024-41983 is classified as an information disclosure vulnerability due to the exposure of SQL statements in error messages.
What is the potential impact of CVE-2024-41983?
The potential impact of CVE-2024-41983 includes unauthorized access to sensitive database information that could lead to data breaches.