CVE-2020-24674 — Improper Authorization in Symphony Plus
In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Ser…
Published: 2020-12-22 · CVSS: 8.8 · CVSS 3.1
In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more privilege than intended on the machines.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7