CVE-2018-17217

概要

参考情報

• ptc.com/en/support/article · Vendor Advisory

thingworx platform のその他の脆弱性

• CVE-2018-20092高 7.5PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
• CVE-2018-17218中 5.4An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.
• CVE-2018-17216中 6.5An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.