SSA-944952 V1.0: Authentication Bypass Vulnerability in Opcenter Quality

Risk Summary

<p> Siemens has released updates for Opcenter Quality to fix an authentication bypass vulnerability. This could allow unauthenticated access to the application or cause denial of service condition for existing users. The issue is based on rich client modules using IbsGailWrapper-interface. After issuing the record the authentication bypass vulnerability could take place on all modules. </p> <p> Siemens has released updates for the affected products and recommends to update to the latest versions. </p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)