| Package | Affected versions | Patched versions |
|---|---|---|
| niagara ax | ≤ 3.6 |
Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free