CVE-2024-7986 — Rockwell Automation ThinManager® ThinServer™ Information Disclosure
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerabi…
Published: 2024-08-23 · CVSS: 6.8 · CVSS 4.0
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7