description: A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All versions < V1.6.284.0). Affected applications insufficiently limit the access to the internal message broker system. This could allow an unauthenticated remote attacker to subscribe to arbitrary message queues.
problem types: CWE-668: Exposure of Resource to Wrong Sphere
affected:
{
product: SiPass integrated V2.76
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SiPass integrated V2.80
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: SiPass integrated V2.85
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: Siveillance Identity V1.5
vendor: Siemens
versions:
status: affected, version: All versions
}
{
product: Siveillance Identity V1.6
vendor: Siemens
versions:
status: affected, version: All versions < V1.6.284.0
}
