| Package | Affected versions | Patched versions |
|---|---|---|
| thinmanager | ≥ 11.1.0, < 11.1.8≥ 11.2.0, < 11.2.9≥ 12.0.0, < 12.0.7≥ 12.1.0, < 12.1.8≥ 13.0.0, < 13.0.5≥ 13.1.0, < 13.1.3≥ 13.2.0, < 13.2.2 | 11.1.811.2.912.0.712.1.813.0.513.1.313.2.2 |
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free