| Package | Affected versions | Patched versions |
|---|---|---|
| niagara | ≤ 4.4 | |
| niagara ax framework | ≤ 3.8 |
An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free