| Package | Affected versions | Patched versions |
|---|---|---|
| niagara ax | ≤ 3.6 |
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free